CVE-2025-0707
Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path
- State
- Published
- Severity
- 8.5 High
- Published
- Jan 24, 2025
- Updated
- Feb 12, 2025
- Reserved
- Jan 24, 2025
Description
A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C | VulDB |
Weaknesses
- CWE-426 Untrusted Search Path
Affected Products
| Product | Versions |
|---|---|
Rise Mode Temp CPURise Group |
|
References
- VDB-293235 | Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search pathvdb-entry
- VDB-293235 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #481088 | Rise Group Rise Mode Temp CPU 2.1 OS Command Injectionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.