Network Communication Flaw in PCVue Software
CVE-2025-9999

7.6HIGH

Key Information:

Vendor

Arcinfo

Status
Pcvue
Vendor
CVE Published:
5 September 2025

Badges

👾 Exploit Exists

What is CVE-2025-9999?

A flaw in the network communication layer of PCVue Software allows certain payload elements in messages exchanged between stations to bypass proper validation. This vulnerability can enable attackers to execute unauthorized commands within the application. It is crucial for users of affected versions to apply security measures promptly to safeguard their systems against potential exploitation.

Affected Version(s)

PcVue 16.0

PcVue 16.0 < 16.3.1

PcVue 15.0 < 15.2.12

References

https://www.pcvue.com/security/#SB2025-4
vendor-advisory

CVSS V4

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Guillaume André (Synacktiv)
Pierre Gertner (Synacktiv)
.
CVE-2025-9999 : Network Communication Flaw in PCVue Software