Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

June 1, 2025

Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

Image: Rapid7
Security researchers at Rapid7 have uncovered a troubling trio of vulnerabilities in MICI Network Co., Ltd.’s NetFax server (versions

Published Date:
Jun 02, 2025 (3 hours, 1 minute ago)

Vulnerabilities has been mentioned in this article.

Source: Read More

Previous ArticleCISA Alert: Critical Flaws in Consilium Safety CS5000 Fire Panel Could Enable Remote Takeover, No Patch

Next Article NetSPI Details Multiple Local Privilege Escalation Vulnerabilities in SonicWall NetExtender

Highlights

CVE-2025-5571 – D-Link DCS-932L OS Command Injection

June 4, 2025

CVE ID : CVE-2025-5571

Published : June 4, 2025, 6:15 a.m. | 1 hour, 18 minutes ago

Description : A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

Researchers teach LLMs to solve complex planning challenges

NVIDIA GeForce NOW gets RTX 5080 servers and 100GB cloud storage upgrade

CVE-2025-33114 – IBM Db2 Denial of Service Vulnerability

CVE-2025-5078 – Campcodes Online Shopping Portal SQL Injection

CVE-2025-5571 – D-Link DCS-932L OS Command Injection

Proxy Servers Explained: Types, Use Cases & Trends in 2025 [Technical Deep Dive]

Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

WordPress’ new AI website builder helps you quickly create your own site – and it’s free

Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix

Related Posts