Allnet vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Allnet products: 2 record(s), with severity, exploitation and fixes.

All-rut22gw Firmware 2

Exploited only (KEV) →

CVE-2025-29269 Critical · 9.8 CWE-78 Dec 4, 2025

OS Command Injection in Allnet All-rut22gw Firmware

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.

CVE-2025-29268 Critical · 9.8 CWE-798 Dec 4, 2025

Use of Hard-coded Credentials in Allnet All-rut22gw Firmware

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.