VULNERABILITY INTELLIGENCE

CVE-2025-41701

CVSS score7.8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.

Weakness classification

  • info@cert.vde.com: CWE-502

Primary references