Vulnerability · Published May 11, 2025 · Assigned by VulDB

CVE-2025-4539Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path

High 7.0

In plain English

A high-severity uncontrolled search path in ToDesk from Hainan. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)7.0High

Exploit odds (30 days)0.2%top 87.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Hainan	ToDesk	4.7.6.3

Weakness: CWE-427, CWE-426 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

VDB-308284 | Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path vdb-entry
VDB-308284 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #566698 | Hainan Interesting Technology Co., Ltd todesk 4.7.6.3 privilege escalation third-party-advisory
https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc broken-link, exploit
https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc#%20%E3%80%8Atodesk%20program%20has%20a%20privilege%20escalation%20vulnerability%E3%80%8B exploit