CVE-2025-1700

State
Published
Severity
7.1 High
Published
Jul 17, 2025
Updated
Jul 21, 2025
Reserved
Feb 25, 2025

Read the record on cve.org

Description

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during installation of the software.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nlenovo
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hlenovo

Weaknesses

  • CWE-427 Uncontrolled Search Path Element

Affected Products

ProductVersions
Software FixMotorola
  • before 7.3.4.13Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.