Vulnerability details
CVE-2025-13087
Opto22 GRV-EPIC-PR1Opto22 GRV-EPIC-PR2Opto22 groov RIO GRV-R7-I1VAPM-3Opto22 groov RIO GRV-R7-MM1001-10Opto22 groov RIO GRV-R7-MM2001-10
Command Injection in Opto22 Groov REST API
CVSS 4.0
7.5High
Official description
A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to build commands, allowing an attacker with administrative privileges to inject arbitrary commands that execute as root.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 4.0 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
| 6.2Medium | 3.1 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Opto22 | GRV-EPIC-PR1 | v < 4.0.3 | CVEProject cvelistV5 (CNA) |
| Opto22 | GRV-EPIC-PR2 | v < 4.0.3 | CVEProject cvelistV5 (CNA) |
| Opto22 | groov RIO GRV-R7-I1VAPM-3 | v < 4.0.3 | CVEProject cvelistV5 (CNA) |
| Opto22 | groov RIO GRV-R7-MM1001-10 | v < 4.0.3 | CVEProject cvelistV5 (CNA) |
| Opto22 | groov RIO GRV-R7-MM2001-10 | v < 4.0.3 | CVEProject cvelistV5 (CNA) |
References and advisories
3
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-11-21
- Last updated
- 2025-11-21
- State
- Published
- Assigner (CNA)
- icscert
Exploit prediction (EPSS)
7.29%
Probability of exploitation in 30 days
94.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')