CVE-2025-9000

Katalog CVE

CVSS 7.0 · High EPSS 0,16%

Kerentanan Untrusted Search Path pada mechrevo control center gx v2. Skor CVSS 3.1 7.0 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.

Rincian

Terbit di NVD

15 Agustus 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber vuldb.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-426: Untrusted Search Path
CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?submit.624903 advisory pihak ketiga · vdb entry
• https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX broken link
• https://vuldb.com/cve/CVE-2025-9000
• https://vuldb.com/submit/624903
• https://vuldb.com/vuln/320029
• https://vuldb.com/vuln/320029/cti