Vulnerability Description
Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hummingheads | Defense Platform | <= 3.9.51.0 |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN66673020/Third Party Advisory
- https://www.hummingheads.co.jp/dep/storelist/Product
FAQ
What is CVE-2025-24845?
CVE-2025-24845 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted dat...
How severe is CVE-2025-24845?
CVE-2025-24845 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-24845?
Check the references section above for vendor advisories and patch information. Affected products include: Hummingheads Defense Platform.