Summary
Successful exploitation of these vulnerabilities could allow an attacker to redirect the SSH connection to an attacker controlled device, gain admin access to the web portal, and gain limited shell access.
The following versions of Columbia Weather Systems MicroServer are affected:
- MicroServer firmware (CVE-2025-61939, CVE-2025-64305, CVE-2025-66620)
| CVSS | Vendor | Equipment | Vulnerabilities |
|---|---|---|---|
| v3 8.8 | Columbia Weather Systems | Columbia Weather Systems MicroServer | Improper Restriction of Communication Channel to Intended Endpoints, Cleartext Storage in a File or on Disk, Command Shell in Externally Accessible Directory |
Background
- Critical Infrastructure Sectors: Information Technology
- Countries/Areas Deployed: United States
- Company Headquarters Location: United States
Vulnerabilities
CVE-2025-61939
An unused function in the MicroServer can start a reverse ssh connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker controlled device.
Affected Products
Columbia Weather Systems MicroServer
Vendor:
Columbia Weather Systems
Columbia Weather Systems
Product Version:
Columbia Weather Systems MicroServer firmware: <MS_4.1_14142
Columbia Weather Systems MicroServer firmware: <MS_4.1_14142
Product Status:
known_affected
known_affected
Remediations
[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.
This article has been indexed from All CISA Advisories
Read the original article: