Vulnerability · Published Aug 15, 2025 · Assigned by VulDB
CVE-2025-9000Mechrevo Control Center GX V2 reg File uncontrolled search path
High 7.0
In plain English
A high-severity uncontrolled search path in Control Center GX V2 from Mechrevo. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mechrevo | Control Center GX V2 | 5.56.51.48 |
Weakness: CWE-427, CWE-426 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-320029 | Mechrevo Control Center GX V2 reg File uncontrolled search path vdb-entry, technical-description
- VDB-320029 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- CVE-2025-9000 | CVE Analysis and Report third-party-advisory
- Submit #624903 | Mechrevo Control Center GX V2 5.56.51.48 Insecure .reg File Handler third-party-advisory
- https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX exploit
- https://vuldb.com/?submit.624903 exploit