PT-2026-3845 · Everest · Everest

CVE-2025-68134 · Publicado 2026-01-21 · Atualizado 2026-01-21

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2025.10.0

Description The software may experience crashes due to the frequent use of the assert function for error handling. This can lead to a denial of service, as the manager terminates all modules and exits upon encountering a crash. In environments managing multiple EVSE, this can affect multiple users. The assert function is used to handle errors.

Recommendations Update to version 2025.10.0 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-68134

GHSA-CXC5-RRJ5-8PF3

Produtos afetados

Everest

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68134.json · Exploit
• https://github.com/EVerest/everest-core/security/advisories/GHSA-cxc5-rrj5-8pf3 · Aviso do Fabricante
• https://t.me/CVEtracker/42686 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-68134 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2014071909252571536 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-68134 · Aviso do Fabricante