Back to Database
Status published
High
CVE-2025-11787
Command injection vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Vulnerability Description
Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11787
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Gabriel Gonzalez and Sergio Ruiz
References
More from SGE-PLC1000 SGE-PLC50
View All →CVE-2025-11789
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50
High
7.1
CVE-2025-11788
Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
High
8.5
CVE-2025-11786
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
High
8.5
CVE-2025-11785
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
High
8.5
CVE-2025-11784
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
High
8.5
Affected Vendor
SGE-PLC1000 SGE-PLC50
View all reports →Affected Software
Circutor
Vulnerable Versions:
9.0.2
Timeline
Official Publish:
December 2nd, 2025
Last Modified:
December 2nd, 2025
Added to House:
July 22nd, 2026