{"id":"CVE-2025-0707","state":"PUBLISHED","title":"Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","publishedAt":"2025-01-24T20:00:15.448Z","updatedAt":"2025-02-12T20:41:31.424Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["Rise Group Rise Mode Temp CPU"],"affected":[{"vendor":"Rise Group","product":"Rise Mode Temp CPU","versions":[{"version":"2.1","status":"affected"}],"modules":["Startup"]}],"references":["https://vuldb.com/?id.293235","https://vuldb.com/?ctiid.293235","https://vuldb.com/?submit.481088"],"weaknesses":["CWE-426"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/0xxx/CVE-2025-0707.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-0707","state":"PUBLISHED","datePublished":"2025-01-24T20:00:15.448Z","dateUpdated":"2025-02-12T20:41:31.424Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-01-24T09:52:04.492Z"},"containers":{"cna":{"title":"Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path","descriptions":[{"lang":"en","value":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally."},{"lang":"de","value":"Es wurde eine Schwachstelle in Rise Group Rise Mode Temp CPU 2.1 ausgemacht. Sie wurde als kritisch eingestuft. Es betrifft eine unbekannte Funktion in der Bibliothek CRYPTBASE.dll der Komponente Startup. Durch Manipulieren mit unbekannten Daten kann eine untrusted search path-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen."}],"affected":[{"vendor":"Rise Group","product":"Rise Mode Temp CPU","versions":[{"version":"2.1","status":"affected"}],"modules":["Startup"]}],"references":[{"url":"https://vuldb.com/?id.293235","name":"VDB-293235 | Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.293235","name":"VDB-293235 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.481088","name":"Submit #481088 | Rise Group Rise Mode Temp CPU 2.1 OS Command Injection","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.5,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":6.8,"vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-426","type":"CWE","lang":"en","description":"Untrusted Search Path"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-01-24T20:00:15.448Z"},"timeline":[{"time":"2025-01-24T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-01-24T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-01-24T10:57:07.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Fergod (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-0707","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-01-24T20:27:07.096818Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-12T20:41:31.424Z"}}]}}}