{"id":"CVE-2025-9000","title":"A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48","summary":"A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally.…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-426","CWE-427"],"vendor":"mechrevo","product":"control_center_gx_v2","affected":["control_center_gx_v2 = 5.56.51.48"],"published":"2025-08-15","updated":"2026-10-07","sourceUpdated":"2026-10-07T07:16:56.410","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-9000","references":[{"url":"https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2025-9000","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/624903","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/320029","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/320029/cti","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.624903","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2025-08-15T12:48:33.252438Z"},"epss":0.00168,"epssPercentile":0.05485,"ingestedAt":"2026-10-07T08:20:03.890Z","slug":"CVE-2025-9000","body":"## Overview\n\nA vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.\n\n## Affected\n\n- `control_center_gx_v2 = 5.56.51.48`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}