CVEvulnerability

CVE-2025-66848

9.8 CRITICAL Published 2025-12-30 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2025-12-30
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability.

Affected configurations

• jdcloud ax1800 firmware (<= 4.3.1.r4308) • jdcloud ax3000 firmware (<= 4.3.1.r4318) • jdcloud ax6600 firmware (<= 4.5.1.r4533) • jdcloud be6500 firmware (<= 4.4.1.r4308) • jdcloud er1 firmware (<= 4.5.1.r4518) • jdcloud er2 firmware (<= 4.5.1.r4518)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References