Read the docs
TI-2025-24204 Aliases CVE-2025-34035GHSA-xv32-fpqh-v67r

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

Priority HIGH 82CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.24839 97th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EnGeniusEnShare IoT Gigabit Cloud Serviceup to 1.4.11—No fix listedCNA
  • EnShare IoT Gigabit Cloud Service VendorEnGenius Affected up to 1.4.11 Fixed in — No fix listed CNA

CPE configurations NVD · 59

CPEVersionsRoleVendor
cpe:2.3:o:engeniustech:esr300_firmware:1.1.0.28:*:*:*:*:*:*:*1.1.0.28VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.3.1.42:*:*:*:*:*:*:*1.3.1.42VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.4.1.28:*:*:*:*:*:*:*1.4.1.28VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableEnGenius
cpe:2.3:o:engeniustech:esr300_firmware:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableEnGenius
cpe:2.3:h:engeniustech:esr300:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.1.0.29:*:*:*:*:*:*:*1.1.0.29VulnerableEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.3.1.41:*:*:*:*:*:*:*1.3.1.41VulnerableEnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.1.0.28:*:*:*:*:*:*:* Versions 1.1.0.28 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.3.1.42:*:*:*:*:*:*:* Versions 1.3.1.42 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.4.1.28:*:*:*:*:*:*:* Versions 1.4.1.28 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr300_firmware:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.1.0.29:*:*:*:*:*:*:* Versions 1.1.0.29 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.3.1.41:*:*:*:*:*:*:* Versions 1.3.1.41 Vulnerable ·EnGenius
Show 49 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:engeniustech:esr350_firmware:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableEnGenius
cpe:2.3:o:engeniustech:esr350_firmware:1.4.11:*:*:*:*:*:*:*1.4.11VulnerableEnGenius
cpe:2.3:h:engeniustech:esr350:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.1.0.50:*:*:*:*:*:*:*1.1.0.50VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.2.1.46:*:*:*:*:*:*:*1.2.1.46VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.3.1.63:*:*:*:*:*:*:*1.3.1.63VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.0.23:*:*:*:*:*:*:*1.4.0.23VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableEnGenius
cpe:2.3:o:engeniustech:esr600_firmware:1.4.11:*:*:*:*:*:*:*1.4.11VulnerableEnGenius
cpe:2.3:h:engeniustech:esr600:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.2.2.23:*:*:*:*:*:*:*1.2.2.23VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.3.1.26:*:*:*:*:*:*:*1.3.1.26VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.3.5.18:*:*:*:*:*:*:*1.3.5.18VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableEnGenius
cpe:2.3:o:engeniustech:esr900_firmware:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableEnGenius
cpe:2.3:h:engeniustech:esr900:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:esr1200_firmware:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1200_firmware:1.3.1.34:*:*:*:*:*:*:*1.3.1.34VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1200_firmware:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1200_firmware:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1200_firmware:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableEnGenius
cpe:2.3:h:engeniustech:esr1200:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.2.2.27:*:*:*:*:*:*:*1.2.2.27VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.3.1.34:*:*:*:*:*:*:*1.3.1.34VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableEnGenius
cpe:2.3:o:engeniustech:esr1750_firmware:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableEnGenius
cpe:2.3:h:engeniustech:esr1750:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.3.17:*:*:*:*:*:*:*1.3.3.17VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.7.20:*:*:*:*:*:*:*1.3.7.20VulnerableEnGenius
cpe:2.3:o:engeniustech:epg5000_firmware:1.3.9.21:*:*:*:*:*:*:*1.3.9.21VulnerableEnGenius
cpe:2.3:h:engeniustech:epg5000:-:*:*:*:*:*:*:*not specified by NVDRunning onEnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr350_firmware:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.1.0.50:*:*:*:*:*:*:* Versions 1.1.0.50 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.2.1.46:*:*:*:*:*:*:* Versions 1.2.1.46 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.3.1.63:*:*:*:*:*:*:* Versions 1.3.1.63 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.0.23:*:*:*:*:*:*:* Versions 1.4.0.23 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr600_firmware:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.2.2.23:*:*:*:*:*:*:* Versions 1.2.2.23 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.3.1.26:*:*:*:*:*:*:* Versions 1.3.1.26 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.3.5.18:*:*:*:*:*:*:* Versions 1.3.5.18 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr900_firmware:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:esr1200_firmware:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1200_firmware:1.3.1.34:*:*:*:*:*:*:* Versions 1.3.1.34 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1200_firmware:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1200_firmware:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1200_firmware:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.2.2.27:*:*:*:*:*:*:* Versions 1.2.2.27 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.3.1.34:*:*:*:*:*:*:* Versions 1.3.1.34 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:esr1750_firmware:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:esr1750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.3.17:*:*:*:*:*:*:* Versions 1.3.3.17 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.7.20:*:*:*:*:*:*:* Versions 1.3.7.20 Vulnerable ·EnGenius
  • cpe:2.3:o:engeniustech:epg5000_firmware:1.3.9.21:*:*:*:*:*:*:* Versions 1.3.9.21 Vulnerable ·EnGenius
  • cpe:2.3:h:engeniustech:epg5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EnGenius

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34035
  2. 2026-10-03 Alias added: GHSA-xv32-fpqh-v67r

References

Exploit 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences