CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-41385: An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a...
6.7
CVSS
Description
An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a logged-in administrative user.
Classification
CVE ID: CVE-2025-41385
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.7
CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Problem Types
Improper neutralization of special elements used in an OS command ('OS Command Injection')Affected Products
Vendor: UCHIDA YOKO CO., LTD.
Product: wivia 5
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.13% (probability of being exploited)
EPSS Percentile: 33.89% (scored less or equal to compared to others)
EPSS Date: 2025-06-16 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-41385https://www.uchida.co.jp/wivia/support02.html
https://jvn.jp/en/jp/JVN51394666/