Vulnerability Description
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-14213?
CVE-2025-14213 is a documented vulnerability. Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating s...
How severe is CVE-2025-14213?
CVSS scoring is not yet available for CVE-2025-14213. Check NVD for updates.
Is there a patch for CVE-2025-14213?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.