CVE-2025-47416

A vulnerability exists in the ConsoleFindCommandMatchListfunction in libsymproc. soimported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList.



A third-party researcher discovered that the ConsoleFindCommandMatchListenumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name.



Confirmed Affected Hardware:TSW-760, TSW-1060 



Confirmed Affected Firmware:3.002.1061



Fixed Firmware: no fixed released(product is discontinued and end of life)







For x70



The Affected Firmware:- 3.000.0110.001 and versions below 



The Fixed Firmware:- 3.001.0031.001