CVE-2025-10203 — HIGH (7.8)

Vulnerability Description

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-23

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-f

FAQ

What is CVE-2025-10203?

CVE-2025-10203 is a vulnerability with a CVSS score of 7.8 (HIGH). Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to...

How severe is CVE-2025-10203?

CVE-2025-10203 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-10203?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.