CVE-2025-2773

Summary

CVE-2025-2773 is a remote code execution vulnerability affecting multiple routers from BEC Technologies. The issue is caused by a command injection flaw in the management interface, which listens on TCP port 22 by default. An attacker can exploit this vulnerability by supplying malicious input, leading to arbitrary code execution on the affected device. Authentication is required to exploit this vulnerability, but the existing authentication mechanism can be bypassed. Discovered as ZDI-CAN-25903, this weakness poses a significant risk to network security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.