CVE-2025-58428Active Exploitation

LOWCVSS 9.4 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote command execution, full shell access, and potential lateral movement within the network.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-77

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-07: 1Active Exploitation · 2026-06-07: 1Technical Details · 2026-06-07: 106-07
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • ThreadLinqs@threadlinqs
    Active Exploitation

    NEW THREAT INTEL: Fuel Tank Gauges (ATG) under active attack - CVE-2025-58428 CVSS 9.9, 1,000+ exposed. 9 detections, 14 IOCs. https://intel.threadlinqs.com/threat/TL-2026-0708 #ThreatIntel #ICS https://t.co/R306iOIV6E

    Post summary

    CVE‑2025‑58428, a high‑severity flaw in fuel tank gauges, is being actively exploited in the field, with over 1,000 exposed units and multiple detections and IOCs reported.

    0000040
    57 followersView on X

Explore more