VULNERABILITY INTELLIGENCE
CVE-2025-61937
CVSS score10 CRITICAL
EPSS probability1.48%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-94
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory
- ics-cert@hq.dhs.gov — Permissions Required
- ics-cert@hq.dhs.gov — Vendor Advisory
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource