PT-2025-30186 · Eluktronics · Eluktronics Control Center

Pipapupa · Published 2025-07-20 · Updated 2025-09-15 · CVE-2025-7884

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eluktronics Control Center version 5.23.51.41

Description A problematic issue exists within the REG File Handler component of the software due to insufficient verification of data authenticity. This can be exploited on the local host. The exploit has been publicly disclosed, and the vendor was informed but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2025-7884

Affected Products

Eluktronics Control Center

References · 10

• 🔥 https://drive.proton.me/urls/5PQ1VRZ3CG#M2JyUWapaX85 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7884 · Security Note
• https://vuldb.com/?submit.611436 · Note
• https://t.me/cvetracker/28260 · Telegram Post
• https://t.me/cveNotify/135514 · Telegram Post
• https://t.me/cvenotify/129597 · Telegram Post
• https://vuldb.com/?id.316999 · Note
• https://vuldb.com/?ctiid.316999 · Note
• https://twitter.com/CVEnew/status/1946895321188934119 · Twitter Post