← Back

CVE-2025-12509

nvd nist
Published: Oct 31, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.7 / Impact: 6.0
Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6 (Secondary)

Description

On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights.

Related CWEs

CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (1)

Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6

Timeline

No history available yet.