CVE-2021-31698: Quectel EG25-G Firmware

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.

Affected products

• Quectel EG25-G Firmware: up to and including 202006130814

Published 2021-08-12. Last modified 2026-06-17.