CVE-2025-66644

Producto

Array Networks / ArrayOS AG

Vulnerabilidad

Array Networks ArrayOS AG OS Command Injection Vulnerability

Añadido a KEV

8 dic 2025

Remediar antes de

29 dic 2025

Uso conocido en ransomware

No

Descripción resumida

Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/ag.html ; https://www.jpcert.or.jp/at/2025/at250024.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-66644