CVE-2025-9999

Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving…

arcinfo·CWE-940·Published 2025-09-05

CVSS

—

EPSS

0.00

KEV

Exploits

Vendor statements (1)

pcvue.com

cve.orgen

216 chars

Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.

NVDes

240 chars

Algunos elementos de la carga útil de los mensajes enviados entre dos estaciones en una arquitectura de red no se verifican adecuadamente en la estación receptora, permitiendo a un atacante ejecutar comandos no autorizados en la aplicación.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
4.0	Primary	cve.org	7.6	—	—	CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Green
4.0	Secondary	NVD	7.6	—	—	CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Green