CVE-2025-27027 Information

Description

A user with vpuser credentials that opens an SSH connection to the device gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell bypassing the rbash restrictions.

Reference

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27027

CNNVD-202507-1272 (Published: 2025-07-09)

Share on: