CVE Feed

    Dashboard / CVE / CVE-2025-60957

    CVE-2025-60957

    OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.

    Published:Oct 6, 2025
    Last Modified:Oct 10, 2025
    EPS:Oct 6, 2025
    EPSS Score:0.00141
    CVSS Score:9.9

    Affected Products

    Vendor
    Endrun
    Product
    Sonoma D12 Network Time Server
    Vendor
    Endruntechnologies
    Product
    Sonoma D12
    Vendor
    Endruntechnologies
    Product
    Sonoma D12 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-60956 (CVSS 8) — Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/…
    CVE-2025-60958 (CVSS 7.3) — Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-…
    CVE-2025-60962 (CVSS 8.2) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…
    CVE-2025-60964 (CVSS 9.1) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…
    CVE-2025-60969 (CVSS 5.7) — Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-00…
    CVE-2025-60959 (CVSS 8.2) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…
    CVE-2025-60960 (CVSS 8.2) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…
    CVE-2025-60961 (CVSS 6.1) — Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-…
    CVE-2025-60963 (CVSS 8.2) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…
    CVE-2025-60965 (CVSS 9.1) — OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High