Read the docs
TI-2025-03264 Aliases CVE-2025-3705GHSA-qrmv-v4hm-rx2g

OS Command Injection via USB Config Load

Priority LOW 31CWE-78Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00716 54th percentileScored 2026-11-07
Fix Fixed FDS102 (Frauscher): v2.13.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FrauscherFDS1020.0.0 to before v2.13.3v2.13.3Patch availableCNA
FrauscherFDS1010.0.0 – v1.4.25—No fix listedCNA
FrauscherFDS-SNMP1010.0.0 – v.2.3.9—No fix listedCNA
  • FDS102 VendorFrauscher Affected 0.0.0 to before v2.13.3 Fixed in v2.13.3 Patch available CNA
  • FDS101 VendorFrauscher Affected 0.0.0 – v1.4.25 Fixed in — No fix listed CNA
  • FDS-SNMP101 VendorFrauscher Affected 0.0.0 – v.2.3.9 Fixed in — No fix listed CNA

Remediation

  • Fix · CNA FDS102 (Frauscher) Fixed in v2.13.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Frauscher FDS102 v2.13.3

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-03193 OS Command Injection via Config Upload in WebUIPriority MEDIUM 43
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3705
  2. 2026-10-03 Alias added: GHSA-qrmv-v4hm-rx2g

References

Other 1

  • TI-2023-03967 Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2022-03290 Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2025-03193 OS Command Injection via Config Upload in WebUI CVSS 3.1CRITICAL 9.1
  • TI-2023-03841 Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability CVSS 3.1HIGH 7.5
  • TI-2023-02699 Frauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability CVSS 3.1HIGH 7.5
  • TI-2023-05065 Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability CVSS 3.1HIGH 8.8
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences