CVE-2025-43950

DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking. It happens by placing a malicious DLL in a directory (in the absence of a legitimate DLL), which is then loaded by the application instead of the legitimate DLL. This causes the malicious DLL to load with the same privileges as the application, thus causing a privilege escalation.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43950
https://www.dpma.de/english/services/efiling/dpmadirekt/downloads/index.html

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
CWE		CWE-427
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8

23 Apr 2025, 14:08

Type	Values Removed	Values Added
Summary		(es) DPMAdirektPro 4.1.5 es vulnerable al secuestro de DLL. Esto ocurre al colocar una DLL maliciosa en un directorio (en ausencia de una DLL legítima), que luego es cargada por la aplicación en lugar de la DLL legítima. Esto provoca que la DLL maliciosa se cargue con los mismos privilegios que la aplicación, lo que provoca una escalada de privilegios.

22 Apr 2025, 18:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-04-22 18:16

Updated : 2026-06-17 09:24

NVD link : CVE-2025-43950

Mitre link : CVE-2025-43950

CVE.ORG link : CVE-2025-43950

JSON object : View

Products Affected

No product.

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2025-43950", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43950", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-04-23T13:23:32.110900Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-04-22T18:16:01.517", "references": [{"url": "https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43950", "source": "cve@mitre.org"}, {"url": "https://www.dpma.de/english/services/efiling/dpmadirekt/downloads/index.html", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking. It happens by placing a malicious DLL in a directory (in the absence of a legitimate DLL), which is then loaded by the application instead of the legitimate DLL. This causes the malicious DLL to load with the same privileges as the application, thus causing a privilege escalation."}, {"lang": "es", "value": "DPMAdirektPro 4.1.5 es vulnerable al secuestro de DLL. Esto ocurre al colocar una DLL maliciosa en un directorio (en ausencia de una DLL leg\u00edtima), que luego es cargada por la aplicaci\u00f3n en lugar de la DLL leg\u00edtima. Esto provoca que la DLL maliciosa se cargue con los mismos privilegios que la aplicaci\u00f3n, lo que provoca una escalada de privilegios."}], "lastModified": "2026-06-17T09:24:48.190", "sourceIdentifier": "cve@mitre.org"}