CVE-2025-3705

MEDIUM EPSS 51.3%

Published Jul 7, 202511mo ago · Modified Jun 17, 20261w ago

6.8 CVSS 3.1

Medium

Published Jul 7, 2025 11mo ago

Last Modified Jun 17, 2026 1w ago

Description

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive.

CVSS Details

Base Score

6.8

Exploitability

0.9

Impact

5.9

Vector string

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Physical

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

51.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

References 1

certvde.com https://certvde.com/en/advisories/VDE-2025-030

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.