CVE-2014-7173: Farsite Farlinx x25 Gateway Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, or sysRestoreX25Cplt.php.

Affected products

• Farsite Farlinx x25 Gateway Firmware: up to and including 2014-09-25

Published 2020-06-01. Last modified 2026-06-17.