CVE-2025-9000

HIGH

Mechrevo Control Center GX V2 5.56.51.48 - Untrusted Search Path in reg File Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.320029
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.320029
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.624903

Scores

CVSS v3 7.0
EPSS 0.0015
EPSS Percentile 4.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-426 CWE-427
Status published
Products (1)
mechrevo/control_center_gx_v2 5.56.51.48
Published Aug 15, 2025
Tracked Since Feb 18, 2026