Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface
Published Jul 16, 2025
9.8
CRITICALCVSS 3.1
EPSS 27.36%
Description
Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.
Affected products
-
- Version AP1100 AWOS versions 5.0.2 GA and earlierStatusaffectedConstraints-
- Version AP1200 AWOS versions 5.0.2 GA and earlierStatusaffectedConstraints-
- Version AP1300 AWOS versions 5.0.2 GA and earlierStatusaffectedConstraints-
- Version AP1400 AWOS versions 5.0.2 GA and earlierStatusaffectedConstraints-
- Version AP1500 AWOS versions 5.0.2 GA and earlierStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Alcatel-Lucent | OmniAccess Stellar Products | n/a |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Users and administrators of affected products are advised to contact their Business Partner immediately to update to the latest version.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
PoCAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Jul 16, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2025–2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (7 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 27.36% (0.27363) | 98.01th | v5 (v2026.06.15) |
| Sep 15, 2026 | 27.36% (0.27363) | 97.95th | v5 (v2026.06.15) |
| Aug 29, 2026 | 25.93% (0.25930) | 97.88th | v5 (v2026.06.15) |
| Aug 5, 2026 | 23.57% (0.23568) | 97.58th | v5 (v2026.06.15) |
| Jun 16, 2026 | 22.54% (0.22535) | 97.41th | v5 (v2026.06.15) |
| Jun 15, 2026 | 21.35% (0.21348) | 97.28th | v5 (v2026.06.15) |
| Jul 16, 2025 | 0.07% (0.00067) | 21.21th | v4 (v2025.03.14) |
References (3)
Change history (0)
No recorded changes yet.