CVE-2025-13798 | ADSLR NBR1005GPEV2 250814-r037c /send_order.cgi ap_macfilter_add mac command injection

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. It has been declared as critical. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection.

This vulnerability appears as CVE-2025-13798. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.