← CVE Tracker
8.8HIGH

CVE-2025-11787 — Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through…

Circutor · Sge-Plc1000 Firmware · Published 2 Dec 2025 · Modified 26 Sept 2026

Description

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.

References

What to do
  1. Check whether Sge-Plc1000 Firmware is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-11787