CVE-2025-7344

HIGH

Digiwin EAI - Privilege Escalation

Title source: llm

Description

The EAI developed by Digiwin has a Privilege Escalation vulnerability, allowing remote attackers with regular privileges to elevate their privileges to administrator level via a specific API.

References (3)

[Various Sources] https://www.digiwin.com/tw/news/3567.html

[Various Sources] https://www.twcert.org.tw/en/cp-139-10273-ce2ed-2.html

[Various Sources] https://www.twcert.org.tw/tw/cp-132-10272-5b691-1.html

Scores

CVSS v3 8.8

EPSS 0.0015

EPSS Percentile 34.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-648

Status draft

Timeline

Published Jul 21, 2025

Tracked Since Feb 18, 2026