CVE-2025-7883
Eluktronics Control Center Powershell Script Command command injection
- State
- Published
- Severity
- 8.5 High
- Published
- Jul 20, 2025
- Updated
- Jul 21, 2025
- Reserved
- Jul 19, 2025
Description
A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41. Affected is an unknown function of the file \AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. The manipulation leads to command injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Control CenterEluktronics |
|
References
- VDB-316998 | Eluktronics Control Center Powershell Script Command command injectionvdb-entry
- VDB-316998 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #611432 | Eluktronics Control Center 5.23.51.41 Elevation Of Privilegethird-party-advisory
- https://drive.proton.me/urls/V5KQBBTH4G#VKpByTUTOWUWexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.