by Kastro
Paper/Archive/CVE-2025-1265

CVE-2025-1265

Elseta Vinci Protocol Analyzer — Elseta Vinci Protocol Analyzer OS Command Injection

EPSS 1%CVSS 9.9
critical.is priorityof 100
44
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 72.9.729 × 2014.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an attacker to escalate privileges and perform code execution on affected system.

Affected

ProductAffectedFixed inSource
Vinci Protocol Analyzer< 3.2.3.193.2.3.19CNA

Scores by source

icscert (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
icscert (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-25-051-06refelseta.com/support