CVE-2025-4635

Published: May 30, 2025Modified: Jun 17, 2026Deferred

6.6

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Exploitability: 2.3 / Impact: 3.7

Source: cve_disclosure@tech.gov.sg (Secondary)

Description

A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://jct-aq.com/products/airpointer2d/

Source: cve_disclosure@tech.gov.sg

Timeline

No history available yet.