Volerion logoVolerion
Volerion logoVolerion

Omada Gateways OS Command Injection Vulnerability Allowing Arbitrary Command Execution

Vulnerability

A critical OS command injection vulnerability has been identified in several Omada gateway models, including the ER8411, ER7412-M2, ER707-M2, ER7206, ER605, ER706W, ER706W-4G, ER7212PC, G36, G611, FR365, FR205, and FR307-M2. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the device's operating system.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands on the affected device's operating system, potentially allowing attackers to manipulate the device or its functions.

Remediation

Users are advised to update to the latest firmware version available for their specific gateway model. After the firmware upgrade, it is recommended to check the device configurations to ensure all settings are accurate and secure.

Added: Oct 21, 2025, 1:19 AM
Updated: Oct 21, 2025, 2:16 AM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
7.5
exploitability
7.0
remediation
7.7
relevance
0.8
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.