CVE-2025-5106
Published: 23 May 2025
Summary
CVE-2025-5106 is a medium-severity Command Injection (CWE-77) vulnerability. Its CVSS base score is 6.9 (Medium).
Operationally, ranked in the top 18.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A vulnerability classified as critical exists in Fujian Kelixun version 1.0 within the Filename Handler component of the file /app/fax/fax_view.php. The issue stems from improper handling of the fax_file argument, which permits OS command injection as indicated by CWE-77 and CWE-78. The flaw can be triggered remotely without authentication or user interaction, and the vendor did not respond to early disclosure.
Remote attackers can supply crafted input to the fax_file parameter to execute arbitrary operating system commands on the affected system. Successful exploitation yields limited effects on confidentiality, integrity, and availability according to the CVSS 6.9 rating, though the public availability of exploit details increases the potential for misuse.
Public references on Vuldb and GitHub document the disclosure and note the absence of a vendor response or patch. The EPSS score has remained flat at 0.0143 with no material rise since publication, indicating limited observed exploitation interest to date.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-28385
Vulnerability details
A vulnerability was found in Fujian Kelixun 1.0. It has been classified as critical. This affects an unknown part of the file /app/fax/fax_view.php of the component Filename Handler. The manipulation of the argument fax_file leads to os command injection. It…
more
is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.