CVE-2025-1265

Elseta Vinci Protocol Analyzer OS Command Injection

CVSS 9.4 CRITICALEPSS 1.3%CWE-78

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.4EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 feb 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an attacker to escalate privileges and perform code execution on affected system.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Productos afectados

Elseta · Vinci Protocol Analyzer

Referencias

https://elseta.com/support/https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06