IGEL OS Secure Terminal and Secure Shadow Remote Code Execution
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker with network access to a vulnerable device can inject arbitrary commands, leading to remote code execution with elevated privileges. NOTE: IGEL OS v10.x has reached end-of-life (EOL) status.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| IGEL Technology GmbH | OS | 11 to before 11.04.270; 10 to before 10.06.220 | 11.04.270, 10.06.220 | Patch available | CNA |
- OS VendorIGEL Technology GmbH Affected 11 to before 11.04.270; 10 to before 10.06.220 Fixed in 11.04.270, 10.06.220 Patch available CNA
Remediation
- Fix · CNA OS (IGEL Technology GmbH) Fixed in 11.04.270, 10.06.220
Timeline
- 2026-10-02 Threatist record created from CVE-2025-34082
- 2026-10-03 Alias added: GHSA-c767-w6jw-8m4j
References
Sources
- CVE-2025-34082 · CVE Program
- CVE-2025-34082 · NVD
- FIRST EPSS
- GHSA-c767-w6jw-8m4j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences