High severity8.8NVD Advisory· Published Oct 8, 2025· Updated Apr 15, 2026

CVE-2025-57457

Description

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Curo/UC300llm-create
Range: = 5.42.1.7.1.63R1

Patches

Vulnerability mechanics

References

curo.comnvd
github.com/restdone/CVE-2025-57457/tree/mainnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000