SMG Gateway Management Software vulnerabilities

2 known vulnerabilities in SMG Gateway Management Software from Synway. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Synway SMG Gateway Management Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-71284Apr 30, 2026Synway Information EngineeringEPSS 5.73%

  Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization.

• 7.3 High severity

  SMG Gateway Management Software: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-1448Feb 19, 2025SynwayEPSS 2.73%

  A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attac