PT-2025-47418 · Nec · Rakurakumusen Start Ex

Kohei Kuroda · Published 2025-11-19 · Updated 2025-11-19 · CVE-2025-12852

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NEC Corporation RakurakuMusen Start EX All Versions

Description A DLL loading issue exists in NEC Corporation RakurakuMusen Start EX. This allows an attacker to manipulate the PC environment, potentially causing unintended operations on the user’s device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-12852

Affected Products

Rakurakumusen Start Ex

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-12852 · Security Note
• https://t.me/cveNotify/143299 · Telegram Post
• https://jpn.nec.com/security-info/secinfo/nv25-007_en.html · Note
• https://twitter.com/CVEnew/status/1991042928962126227 · Twitter Post
• https://t.me/CVEtracker/37692 · Telegram Post