Vulnerabilities & Exploits

Authenticated Users Can Take Root on 3onedata Gateways

A valid login is enough to turn this gateway into a root shell. The weak point is a diagnostic field that should only accept an IP address, so credential compromise alone can become full device takeover.

CERT Polska says CVE-2025-13605 affects 3onedata GW1101-1D(RS-485)-TB-P gateways on hardware V2.2.0. The flaw lets authenticated users run arbitrary shell commands as root, and firmware 3.0.59B2024080600R4353 fixes it.

That makes the device a high-value pivot point in networks that trust it for industrial connectivity. If an attacker gets any working account, the gateway itself becomes the privilege boundary they can cross.

1 source · May 4

Timeline

• May 4 Reported by CERT Polska

Sources

• May 4 CERT Polska

  Vulnerability in GW1101-1D(RS-485)-TB-P modbus gateways

  OS Command Injection vulnerability (CVE-2025-13605) has been found in 3onedata GW1101-1D(RS-485)-TB-P modbus gateways.

  original

Part of the PlainSec briefing for 2026-05-04

Every edition of this story: Authenticated Users Can Take Root on 3onedata Gateways

More from today

• MOVEit Automation Auth Bypass Forces Full-Installer Upgrades
• FortiClient EMS Hotfixes Leave Uncertainty for 8.0 Users