Vulnerability · Published Jul 20, 2025 · Assigned by VulDB
CVE-2025-7883Eluktronics Control Center Powershell Script Command command injection
High 7.8
In plain English
A high-severity command injection in Control Center from Eluktronics. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Official description
A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41. Affected is an unknown function of the file \AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. The manipulation leads to command injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Eluktronics | Control Center | 5.23.51.41 |
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-316998 | Eluktronics Control Center Powershell Script Command command injection vdb-entry
- VDB-316998 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #611432 | Eluktronics Control Center 5.23.51.41 Elevation Of Privilege third-party-advisory
- https://drive.proton.me/urls/V5KQBBTH4G#VKpByTUTOWUW exploit