Unrated severityOSV Advisory· Published Dec 9, 2025· Updated Dec 11, 2025

CVE-2025-65882

Description

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipad_opad allowing attackers to potentially write arbitrary files or execute arbitrary commands.

Affected products

Ysurac/OpenmptcprouterOSV2 versions
v0.1, v0.10, v0.18, …+ 1 more
- (no CPE)range: v0.1, v0.10, v0.18, …
- (no CPE)range: <=0.64

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

openmptcprouter.commitre
gist.github.com/AradCohen/939ee50d60c4d2bd555a364615a5ab9cmitre
github.com/Ysurac/openmptcprouter/commit/09393d1c41a227bea7d5b85c0a06221b1302b25fmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000