CVE-2025-7884 — LOW (3.3) — White Hats Nepal

Vulnerability Description

A vulnerability classified as problematic was found in Eluktronics Control Center 5.23.51.41. Affected by this vulnerability is an unknown functionality of the component REG File Handler. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Eluktronics	Control Center	5.23.51.41

Related Weaknesses (CWE)

CWE-345

References

https://drive.proton.me/urls/5PQ1VRZ3CG#M2JyUWapaX85Broken Link
https://vuldb.com/?ctiid.316999Permissions RequiredVDB Entry
https://vuldb.com/?id.316999Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.611436Third Party AdvisoryVDB Entry
https://drive.proton.me/urls/5PQ1VRZ3CG#M2JyUWapaX85Broken Link

FAQ

What is CVE-2025-7884?

CVE-2025-7884 is a vulnerability with a CVSS score of 3.3 (LOW). A vulnerability classified as problematic was found in Eluktronics Control Center 5.23.51.41. Affected by this vulnerability is an unknown functionality of the component REG File Handler. The manipula...

How severe is CVE-2025-7884?

CVE-2025-7884 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-7884?

Check the references section above for vendor advisories and patch information. Affected products include: Eluktronics Control Center.