CVE-2025-54958

CVSS 5.3 MEDIUMEPSS 0.8%CWE-78

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Aug 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected products

Mubit co.,ltd. · Powered BLUE 870

References

https://jvn.jp/en/jp/JVN39636188/https://www.mubit.co.jp/sub/products/blue/pb-base-cloud-890.html