CVE-2025-9999

Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.

CVSS

No CVSS.

References

Link	Resource
https://www.pcvue.com/security/#SB2025-4

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Algunos elementos de la carga útil de los mensajes enviados entre dos estaciones en una arquitectura de red no se verifican adecuadamente en la estación receptora, permitiendo a un atacante ejecutar comandos no autorizados en la aplicación.

05 Sep 2025, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-05 17:15

Updated : 2026-06-17 10:10

NVD link : CVE-2025-9999

Mitre link : CVE-2025-9999

CVE.ORG link : CVE-2025-9999

JSON object : View

Products Affected

No product.

CWE

CWE-940

Improper Verification of Source of a Communication Channel

CWE-1288

Improper Validation of Consistency within Input

{"id": "CVE-2025-9999", "cveTags": [], "metrics": {"ssvcV203": [{"source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "ssvcData": {"role": "CNA", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3"}}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9999", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-05T17:48:53.486647Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 7.6, "Automatable": "YES", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Green", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "GREEN", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "affectedData": [{"vendor": "arcinfo", "modules": ["Networking"], "product": "PcVue", "versions": [{"status": "affected", "version": "16.0.0", "versionType": "cpe", "lessThanOrEqual": "16.3.3"}, {"status": "affected", "version": "15.0.0", "versionType": "cpe", "lessThanOrEqual": "15.2.12"}, {"status": "affected", "version": "12.0.0", "versionType": "cpe", "lessThanOrEqual": "12.0.31"}], "defaultStatus": "affected"}]}], "published": "2025-09-05T17:15:40.263", "references": [{"url": "https://www.pcvue.com/security/#SB2025-4", "source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "description": [{"lang": "en", "value": "CWE-940"}, {"lang": "en", "value": "CWE-1288"}]}], "descriptions": [{"lang": "en", "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application."}, {"lang": "es", "value": "Algunos elementos de la carga \u00fatil de los mensajes enviados entre dos estaciones en una arquitectura de red no se verifican adecuadamente en la estaci\u00f3n receptora, permitiendo a un atacante ejecutar comandos no autorizados en la aplicaci\u00f3n."}], "lastModified": "2026-06-17T10:10:13.810", "sourceIdentifier": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932"}