CVE Feed

    Dashboard / CVE / CVE-2025-2701

    CVE-2025-2701

    A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/port_setup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Mar 24, 2025
    Last Modified:Oct 17, 2025
    EPS:Mar 24, 2025
    EPSS Score:0.00321
    CVSS Score:6.3

    Affected Products

    Vendor
    Amttgroup
    Product
    Hibos

    Exploits

    https://github.com/zian10001/cve/blob/main/rce.md

    Related CVEs

    CVE-2025-14090 (CVSS 2) — A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0. This affects an unknown part…
    CVE-2025-13123 (CVSS 2.1) — A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown functio…
    CVE-2025-12253 (CVSS 5.5) — A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is…
    CVE-2016-15048 (CVSS 10) — AMTT Hotel Broadband Operation System (HiBOS) contains an unauthenticated command injection vulnerability in t…
    CVE-2025-3983 (CVSS 5.1) — A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affect…
    CVE-2024-11051 (CVSS 5.3) — A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified …
    CVE-2024-11050 (CVSS 5.3) — A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as proble…
    CVE-2024-41476 (CVSS 9.8) — AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /man…
    CVE-2024-39072 (CVSS 5.5) — AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/confere…
    CVE-2023-6647 (CVSS 7.3) — A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High