Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-13087
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Command Injection in Opto22 Groov REST API
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to build commands, allowing an attacker with administrative privileges to inject arbitrary commands that execute as root.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Opto 22 groov RIO 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opto 22 groov RIO是美国Opto 22公司的一个工业型远程I/O模块。 Opto 22 groov RIO存在操作系统命令注入漏洞，该漏洞源于不安全使用头部值构建命令，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Opto22GRV-EPIC-PR1 0 ~ 4.0.3 -
Opto22GRV-EPIC-PR2 0 ~ 4.0.3 -
Opto22groov RIO GRV-R7-MM1001-10 0 ~ 4.0.3 -
Opto22groov RIO GRV-R7-MM2001-10 0 ~ 4.0.3 -
Opto22groov RIO GRV-R7-I1VAPM-3 0 ~ 4.0.3 -
II. Public POCs for CVE-2025-13087
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-13087
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same weakness: CWE-78
V. Comments for CVE-2025-13087

No comments yet

Leave a comment