{"id":40723,"date":"2025-05-20T04:42:48","date_gmt":"2025-05-20T04:42:48","guid":{"rendered":""},"modified":"2025-06-22T11:35:40","modified_gmt":"2025-06-22T17:35:40","slug":"cve-2025-26390-critical-sql-injection-vulnerability-in-ozw672-and-ozw772-devices","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-26390-critical-sql-injection-vulnerability-in-ozw672-and-ozw772-devices\/","title":{"rendered":"CVE-2025-26390: Critical SQL Injection Vulnerability in OZW672 and OZW772 Devices<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity community has recently identified a critical vulnerability, CVE-2025-26390, that affects users of the OZW672 and OZW772 devices. This vulnerability resides in the web service of the aforementioned devices and is specifically related to SQL injection attacks when checking authentication data. The severity of this vulnerability lies in the potential for an unauthenticated remote<\/a> attacker to bypass the check and authenticate as an Administrator user, potentially leading to system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-26390
\nSeverity: Critical (9.8 CVSS score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

OZW672 | All versions < V6.0\nOZW772 | All versions < V6.0\n\nHow the Exploit Works<\/strong><\/p>\n

The exploitation takes place when an attacker sends specially crafted SQL commands within authentication data<\/a> to the web service of the affected devices. The web service fails to properly sanitize the input data, allowing the injection of malicious SQL<\/a> commands. These commands are then executed<\/a> in the database context. As a result, an attacker could manipulate SQL queries, potentially leading<\/a> to unauthorized access as an Administrator user.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Here is a conceptual example of how a malicious request exploiting this vulnerability<\/a> could look. In this example, an HTTP request is sent to the vulnerable endpoint with a malicious payload designed to exploit the SQL<\/a> injection vulnerability.<\/p>\n

POST \/login HTTP\/1.1\nHost: vulnerable.device.com\nContent-Type: application\/x-www-form-urlencoded\nusername=admin';--&password=<\/code><\/pre>\n
In this example, the `username` parameter contains a SQL injection<\/a> payload. The payload `admin’;–` aims to end the current SQL statement prematurely, comment out the rest of the original query, and authenticate as the admin user without requiring a password<\/a>.
\nThe best way to mitigate this vulnerability is by applying the vendor patch<\/a>. If this is not immediately possible, using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can serve as temporary mitigation. It is, however, strongly recommended to apply the patch as soon as possible due to the high severity of this vulnerability<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The cybersecurity community has recently identified a critical vulnerability, CVE-2025-26390, that affects users of the OZW672 and OZW772 devices. This vulnerability resides in the web service of the aforementioned devices and is specifically related to SQL injection attacks when checking authentication data. The severity of this vulnerability lies in the potential for an unauthenticated […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[74],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-40723","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-sql-injection"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t