Uncontrolled Search Path Vulnerability in Mechrevo Control Console by Mechrevo
CVE-2025-4272

7.3HIGH

Key Information:

Vendor

Mechrevo

Status
Control Console
Vendor
CVE Published:
5 May 2025

Badges

👾 Exploit Exists

What is CVE-2025-4272?

A vulnerability exists in Mechrevo Control Console version 1.0.2.70 related to the GCUService component, specifically in the csCAPI.dll library. The flaw enables an uncontrolled search path which may allow local attackers to exploit the system. The attack complexity is elevated, making exploitation difficult. Despite this, the details of the exploit have been publicly disclosed, raising concerns for users of the software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Control Console 1.0.2.70

References

https://vuldb.com/?id.307376
vdb-entry
https://vuldb.com/?ctiid.307376
signaturepermissions-required
https://vuldb.com/?submit.563468
third-party-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ba1_Ma0 (VulDB User)
JSON
.