netcore B6V2 vulnerabilities

Latest netcore B6V2 CVEs

Newest publication first

1. CVE-2025-5147 Netcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection

   Published 2025-05-25

   Medium·CVSS 5.3 EPSS 1.2%

   A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This issue affects the function tools_ping of the file /usr/bin/network_tools. The manipulation of the argument url leads to command injection. The attack may be initia...

2. CVE-2025-5146 Netcore NBR200V2 HTTP Header routerd passwd_set command injection

   Published 2025-05-25

   Medium·CVSS 5.3 EPSS 1.2%

   A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipul...

3. CVE-2025-5145 Netcore POWER13 Query String cgi-bin command injection

   Published 2025-05-25

   Medium·CVSS 5.3 EPSS 1.2%

   A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.