CVE-2025-7883

HIGH

Eluktronics Control Center 5.23.51.41 - Command Injection

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41. Affected is an unknown function of the file \AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. The manipulation leads to command injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.316998
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.316998
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.611432

Scores

CVSS v3 7.8
EPSS 0.0168
EPSS Percentile 73.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-74 CWE-77
Status published
Products (1)
eluktronics/control_center 5.23.51.41
Published Jul 20, 2025
Tracked Since Feb 18, 2026