CVE-2025-67448General

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS. The application does not properly sanitize user input in SMS messages before storing and displaying them. An attacker can send an SMS containing a malicious XSS payload, which will be executed in the context of the victim's browser when the message is viewed.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-05: 2Patch / Workaround · 2026-06-05: 1Technical Details · 2026-06-05: 206-05
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2025-67448 Stored XSS Vulnerability in Neterbit NW-431F Router SMS Module 20241014-IR03 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67448

    Post summary

    The text cites a stored XSS vulnerability (CVE-2025-67448) in a Neterbit router SMS module but does not provide any PoC, exploit code, or mitigation guidance.

    0000070
    4.0K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH severity CVE-2025-67448 (CVSS 7.1): Stored XSS in Neterbit NW-431F Router firmware ≤20241014-IR03. Attackers can execute malicious code via SMS messages. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/SXfdGLZo3a

    Post summary

    An urgent patch is needed for the high‑severity stored XSS vulnerability (CVE‑2025‑67448) affecting Neterbit NW‑431F routers; attackers may inject code through SMS messages.

    0000029
    39 followersView on X

Explore more