Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-22894

Опубликовано: 06 фев. 2025
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

EPSS

Процентиль: 6%
0.00024
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-422

Связанные уязвимости

CVSS3: 6.5
github
около 1 года назад

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

EPSS

Процентиль: 6%
0.00024
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-422