TI-2025-40496 Aliases CVE-2025-65883 GHSA-4w9h-qq4c-69wp

A vulnerability has been identified in Genexis Platinum P4410 router (Firmware…

LOW 39CWE-613Published 2025-12-04 · Updated 2025-12-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-613.

Summary

A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with root privileges. The issue occurs due to improper session invalidation after administrator logout. When an administrator logs out, the session token remains valid. An attacker on the local network can reuse this stale token to send crafted requests via the router’s diagnostic endpoint, resulting in command execution as root.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00391 33rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.41:::::::*	p4410-v2-1.41	Vulnerable	Genexis
cpe:2.3:h:genexis:platinum_4410:-:::::::*	not specified by NVD	Running on	Genexis

cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.41:*:*:*:*:*:*:* Versions p4410-v2-1.41 Vulnerable ·Genexis
cpe:2.3:h:genexis:platinum_4410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Genexis

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-65883
2026-10-03 Alias added: GHSA-4w9h-qq4c-69wp

References

Exploit 1

https://0xw41th.medium.com/my-first-cve-cve-2025-65883-remote-code-execution-in-a-genexis-router-0c35749a99bd

TI-2021-09908 Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute… CVSS 3.1CRITICAL 9.8
TI-2020-15889 UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H)… CVSS 3.1MEDIUM 6.5
TI-2020-15282 A specific router allows changing the Wi-Fi password remotely. CVSS 3.1MEDIUM 6.5
TI-2020-17106 Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to… CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences