CVE-2025-9000

Mechrevo Control Center GX V2 reg File uncontrolled search path

View on CVE.org
Published Aug 15, 2025 CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Description
A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-24966 A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
History
Type Values Removed Values Added
References
Type Values Removed Values Added
Description A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.
CPEs cpe:2.3:a:mechrevo:control_center_gx_v2:*:*:*:*:*:*:*:*
References
Type Values Removed Values Added
CPEs cpe:2.3:a:mechrevo:control_center_gx_v2:5.56.51.48:*:*:*:*:*:*:*
Type Values Removed Values Added
First Time appeared Mechrevo
Mechrevo control Center Gx V2
Vendors & Products Mechrevo
Mechrevo control Center Gx V2
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Title Mechrevo Control Center GX V2 reg File uncontrolled search path
Weaknesses CWE-426
CWE-427
References
Metrics cvssV2_0

{'score': 6, 'vector': 'AV:L/AC:H/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7, 'vector': 'CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 7.3, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}
Earlier changes (1)
Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Oct 7, 2026, 6:33 AM
Reserved
Aug 13, 2025, 6:50 PM

View source JSON

Updated
Aug 15, 2025, 12:48 PM

JSON

Status
Modified
Published
Aug 15, 2025, 2:15 AM
Modified
Oct 7, 2026, 7:16 AM

View source JSON

No data.

Updated
Aug 16, 2025, 9:40 PM

JSON