（CVE-2025-8480）Alpine iLX-507命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8480
• https://www.zerodayinitiative.com/advisories/ZDI-25-766/
• https://github.com/advisories/GHSA-9847-xprf-x456
• https://vulnerability.circl.lu/vuln/cve-2025-8480
• https://www.cnvd.org.cn/flaw/show/CNVD-2025-20812
• https://cve.imfht.com/detail/CVE-2025-8480?lang=en
• https://www.nsfocus.net/vulndb/130271
• https://avd.aliyun.com/product?prod=ilx-507_firmware&page=0

Related Vulnerabilities

• （CVE-2025-8472）Alpine iLX-507 vCard解析堆栈型缓冲区溢出漏洞
• （CVE-2025-8476）Alpine iLX-507 TIDAL证书验证不足漏洞
• (CVE-2025-8473) Alpine iLX-507 UPDM_wstpCBCUpdStart命令注入漏洞
• （CVE-2025-8477）Alpine iLX-507 vCard解析堆栈缓冲区溢出远程代码执行漏洞
• （CVE-2025-8475）Alpine iLX-507设备AVRCP协议栈基于堆栈的缓冲区溢出远程代码执行漏洞
• Alpine 身份绕过漏洞(CVE-2022-23554)