Vulnerability Description
An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or potentially achieve full server compromise. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-14601?
CVE-2025-14601 is a documented vulnerability. An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An a...
How severe is CVE-2025-14601?
CVSS scoring is not yet available for CVE-2025-14601. Check NVD for updates.
Is there a patch for CVE-2025-14601?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.