CVE-2025-66644

Produto

Array Networks / ArrayOS AG

Vulnerabilidade

Array Networks ArrayOS AG OS Command Injection Vulnerability

Adicionado ao KEV

8 de dez. de 2025

Corrigir até

29 de dez. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/ag.html ; https://www.jpcert.or.jp/at/2025/at250024.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-66644