Vulnerability · Published Aug 28, 2025 · Assigned by VulDB
CVE-2025-9582Comfast CF-N1 webmgnt ntp_timezone command injection
Medium 6.3
In plain English
A medium-severity command injection in CF-N1 from Comfast. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.8% (higher than 92% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)4.8%top 8.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.
Affected products (as reported)
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-321695 | Comfast CF-N1 webmgnt ntp_timezone command injection vdb-entry, technical-description
- VDB-321695 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #636128 | COMFAST COMFAST CF-N1 V2 V2.6.0 Command Injection third-party-advisory
- https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/ntp_timezone exploit