Iridium Certus 700
Approved changes feed: RSS · Atom
cpe:2.3:a:intellian_technologies:iridium_certus_700:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Intellian Technologies (60a7d4ca-0a1a-59f1-8973-21d2fceaa990) |
|---|---|
| Product | Iridium Certus 700 (cd20624e-208a-556a-896e-e21830498f97) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41380 |
vulnerable | 2026-06-08 07:25:06.914210 |
Injection vulnerability in Iridium Certus 700
Iridium Certus 700 version 1.0.1 has an embedded credentials vulnerability in the code. This vulnerability allows a local user to retrieve the SSH hash string.
Published: 2025-05-23T12:41:58.459Z
Updated: 2025-05-23T15:02:02.156Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41379 |
vulnerable | 2026-06-08 07:25:06.913816 |
Injection vulnerability in Iridium Certus 700
The Intellian C700 web panel allows you to add firewall rules. Each of these rules has an associated ID, but there is a problem when adding a new rule, the ID used to create the database entry may be different from the JSON ID. If the rule needs to be deleted later, the system will use the JSON ID and therefore fail. This can be exploited by an attacker to create rules that cannot be deleted unless the device is reset to factory defaults.
Published: 2025-05-23T12:41:09.682Z
Updated: 2025-05-23T15:04:14.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41378 |
vulnerable | 2026-06-08 07:25:06.913333 |
Injection vulnerability in Iridium Certus 700
The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel.
Published: 2025-05-23T12:40:14.121Z
Updated: 2025-05-27T14:39:15.642Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.