{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2023-0386", "aliases": [], "title": "Kernel：脆弱性情報", "summary": "Linux カーネルの OverlayFS サブシステムで、nosuid マウントから別のマウントへ能力付きファイルをコピーする際に、setuid ビットが付いたファイルの実行への不正アクセスが可能になる欠陥がある。この UID マッピングバグにより、ローカルユーザーがシステム上で権限をエスカレートできる。", "risk": "ローカルユーザーが特権ユーザーに昇格し、システム上で本来許可されていない操作が可能になる。", "product": "Kernel", "category": "linux", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "redhat", "cvssVector": null, "affected": [ { "product": "Kernel", "range": "Linux kernel 6.2-rc6" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-0386", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a", "label": "CISAが示す関連情報" }, { "url": "https://security.netapp.com/advisory/ntap-20230420-0004/", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2023/dsa-5402", "label": "DSA-5402" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html", "label": "[debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update" }, { "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "label": "[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update" }, { "url": "https://access.redhat.com/security/cve/cve-2023-0386", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0386", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2023-03-22T00:00:00.000Z", "modifiedAt": "2025-10-21T23:15:22.744Z", "fetchedAt": "2026-10-24T04:47:07.349Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "Kernel", "versions": [ { "version": "Linux kernel 6.2-rc6", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-0386", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "fetchedAt": "2026-10-24T04:47:07.349Z", "publishedAt": "2023-03-22T00:00:00.000Z", "modifiedAt": "2025-10-21T23:15:22.744Z", "state": "published", "provider": "redhat", "title": "", "descriptions": [ { "lang": "en", "value": "A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "Kernel", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "Linux kernel 6.2-rc6", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-282", "lang": "en", "description": "CWE-282", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://security.netapp.com/advisory/ntap-20230420-0004/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.debian.org/security/2023/dsa-5402", "label": "DSA-5402", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html", "label": "[debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update", "tags": [ "mailing-list", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "label": "[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update", "tags": [ "mailing-list", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-0386", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"Kernel\",\"versions\":[{\"version\":\"Linux kernel 6.2-rc6\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"lang\":\"en\",\"description\":\"CWE-282\",\"cweId\":\"CWE-282\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-0386:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "sourcePath": "retained:/originalText", "text": "Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-0386:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "modifiedAt": "2025-06-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:22.744Z", "fetchedAt": "2026-10-24T04:47:07.349Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Kernelに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:07.349Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "763cf7a2cd530b7b83b0d22228bfed9ae1b3a6a61447283eacd3e728d8745113", "sourceModifiedAt": "2025-10-21T23:15:22.744Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Linux カーネルの OverlayFS サブシステムで、nosuid マウントから別のマウントへ能力付きファイルをコピーする際に、setuid ビットが付いたファイルの実行への不正アクセスが可能になる欠陥がある。この UID マッピングバグにより、ローカルユーザーがシステム上で権限をエスカレートできる。", "risk": "ローカルユーザーが特権ユーザーに昇格し、システム上で本来許可されていない操作が可能になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ローカルユーザーが nosuid マウント上の能力付きファイルを OverlayFS を介して別のマウントへコピーできる環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Kernel。影響ありとして記載：Linux kernel 6.2-rc6。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json" ], "evidenceIds": [ "E3" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新が用意されていない場合は、配布元や保守会社へCVE番号とパッケージ番号を送り、影響の有無・回避策・提供予定を確認します。他のLinux向けの修正をそのまま入れないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json" ], "evidenceIds": [ "E3" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-0386", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a", "label": "CISAが示す関連情報" }, { "url": "https://security.netapp.com/advisory/ntap-20230420-0004/", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2023/dsa-5402", "label": "DSA-5402" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html", "label": "[debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update" }, { "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "label": "[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update" }, { "url": "https://access.redhat.com/security/cve/cve-2023-0386", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0386", "label": "CISAが示す関連情報" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "sourceField": "retained:/originalText", "excerpt": "Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0386.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"Kernel\",\"versions\":[{\"version\":\"Linux kernel 6.2-rc6\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-0386\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-0386（Kernel）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルユーザーが nosuid マウント上の能力付きファイルを OverlayFS を介して別のマウントへコピーできる環境。\n・公式の対象表：Kernel。影響ありとして記載：Linux kernel 6.2-rc6。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-0386", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:07.349Z", "lastSuccess": "2026-10-24T04:47:07.349Z", "sourceCheckedAt": "2026-10-24T04:47:07.349Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-33538", "aliases": [], "title": "n/a：脆弱性情報", "summary": "TP-Link TL‑WR940N V2/V4、TL‑WR841N V8/V10、TL‑WR740N V1/V2 において、/userRpm/WlanNetworkRpm コンポーネントを通じたコマンドインジェクション脆弱性が確認されました。", "risk": "この脆弱性により、攻撃者が機器上で任意のコマンドを実行できる可能性があります。", "product": "TP-Link Multiple Routers", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33538", "label": "CVE公式レコード" }, { "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/nordic/support/faq/3562/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33538", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-06-07T00:00:00.000Z", "modifiedAt": "2025-12-20T04:55:28.389Z", "fetchedAt": "2026-10-24T04:47:08.625Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-33538", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "fetchedAt": "2026-10-24T04:47:08.625Z", "publishedAt": "2023-06-07T00:00:00.000Z", "modifiedAt": "2025-12-20T04:55:28.389Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.tp-link.com/us/support/faq/3562/", "label": "CISA-ADP", "tags": [ "vendor-advisory", "mitigation" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33538", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-33538:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "sourcePath": "retained:/originalText", "text": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-33538:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "modifiedAt": "2025-06-16T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-12-20T04:55:28.389Z", "fetchedAt": "2026-10-24T04:47:08.625Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-16T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:08.625Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9b84cfdf21956036c00516dd6c0a15fcfe0cb1f1a4c388c1294307bd6a23ba6c", "sourceModifiedAt": "2025-12-20T04:55:28.389Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "TP-Link TL‑WR940N V2/V4、TL‑WR841N V8/V10、TL‑WR740N V1/V2 において、/userRpm/WlanNetworkRpm コンポーネントを通じたコマンドインジェクション脆弱性が確認されました。", "risk": "この脆弱性により、攻撃者が機器上で任意のコマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象製品は TP‑Link TL‑WR940N V2/V4、TL‑WR841N V8/V10、TL‑WR740N V1/V2 で、/userRpm/WlanNetworkRpm コンポーネントが存在することが条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json" ], "evidenceIds": [ "E3" ] }, { "text": "「TP-Link Multiple Routers」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33538", "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "https://www.tp-link.com/nordic/support/faq/3562/", "https://nvd.nist.gov/vuln/detail/CVE-2023-33538" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-33538", "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "https://www.tp-link.com/nordic/support/faq/3562/", "https://nvd.nist.gov/vuln/detail/CVE-2023-33538" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-33538", "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "https://www.tp-link.com/nordic/support/faq/3562/", "https://nvd.nist.gov/vuln/detail/CVE-2023-33538" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-33538", "label": "CVE公式レコード" }, { "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/nordic/support/faq/3562/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33538", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "sourceField": "retained:/originalText", "excerpt": "TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/33xxx/CVE-2023-33538.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-33538", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-33538\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-33538（TP-Link Multiple Routers）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は TP‑Link TL‑WR940N V2/V4、TL‑WR841N V8/V10、TL‑WR740N V1/V2 で、/userRpm/WlanNetworkRpm コンポーネントが存在することが条件です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-33538", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:08.625Z", "lastSuccess": "2026-10-24T04:47:08.625Z", "sourceCheckedAt": "2026-10-24T04:47:08.625Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-43200", "aliases": [], "title": "iOS and iPadOS / iPadOS / macOS / visionOS / watchOS：脆弱性情報", "summary": "iCloudリンクで共有された悪意のある写真や動画を処理する際に論理的な問題が存在し、特定の標的に対する高度な攻撃で悪用された可能性があります。", "risk": "この問題は、特定の標的に対する高度な攻撃で悪用された可能性があると報告されています。", "product": "iOS and iPadOS / iPadOS / macOS / visionOS / watchOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "iOS and iPadOS", "range": "< 15.8.4" }, { "product": "iOS and iPadOS", "range": "< 16.7.11" }, { "product": "iOS and iPadOS", "range": "< 18.3.1" }, { "product": "iPadOS", "range": "< 17.7.5" }, { "product": "macOS", "range": "< 13.7.4" }, { "product": "macOS", "range": "< 14.7.4" }, { "product": "macOS", "range": "< 15.3.1" }, { "product": "visionOS", "range": "< 2.3.1" }, { "product": "watchOS", "range": "< 11.3.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-43200", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/122173", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122174", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122345", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122346", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122900", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122901", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122902", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122903", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122904", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-16T21:36:25.578Z", "modifiedAt": "2026-04-02T18:25:24.222Z", "fetchedAt": "2026-10-24T04:47:09.435Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "15.8.4", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "16.7.11", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "18.3.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iPadOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "17.7.5", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "13.7.4", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "14.7.4", "versionType": "custom" }, { "version": "0", "status": "affected", "lessThan": "15.3.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "visionOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "2.3.1", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "watchOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "11.3.1", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-43200", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "fetchedAt": "2026-10-24T04:47:09.435Z", "publishedAt": "2025-06-16T21:36:25.578Z", "modifiedAt": "2026-04-02T18:25:24.222Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "15.8.4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "16.7.11", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "18.3.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iPadOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "17.7.5", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0", "lessThan": "13.7.4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "0", "lessThan": "14.7.4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/2", "version": "0", "lessThan": "15.3.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "visionOS", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "0", "lessThan": "2.3.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "watchOS", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "0", "lessThan": "11.3.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 4.2, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/122173", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.apple.com/en-us/122174", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/1" }, { "url": "https://support.apple.com/en-us/122345", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/2" }, { "url": "https://support.apple.com/en-us/122346", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/3" }, { "url": "https://support.apple.com/en-us/122900", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/4" }, { "url": "https://support.apple.com/en-us/122901", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/5" }, { "url": "https://support.apple.com/en-us/122902", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/6" }, { "url": "https://support.apple.com/en-us/122903", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/7" }, { "url": "https://support.apple.com/en-us/122904", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/8" }, { "url": "https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.8.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"16.7.11\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.3.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"17.7.5\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"13.7.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"14.7.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.3.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2.3.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"11.3.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":4.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-43200:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-43200:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "modifiedAt": "2025-06-16T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-02T18:25:24.222Z", "fetchedAt": "2026-10-24T04:47:09.435Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-16T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "iOS and iPadOS / iPadOS / macOS / visionOS / watchOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:09.435Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "80490d31fc8b5f4f3110c6c1854b36bf9cb56fb3ff67fe1001bcdbf00f66a502", "sourceModifiedAt": "2026-04-02T18:25:24.222Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "iCloudリンクで共有された悪意のある写真や動画を処理する際に論理的な問題が存在し、特定の標的に対する高度な攻撃で悪用された可能性があります。", "risk": "この問題は、特定の標的に対する高度な攻撃で悪用された可能性があると報告されています。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "iCloudリンクで共有された写真または動画が悪意を持って作成されている場合に影響します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：15.8.4未満の版。影響ありとして記載：16.7.11未満の版。影響ありとして記載：18.3.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / iPadOS。影響ありとして記載：17.7.5未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：13.7.4未満の版。影響ありとして記載：14.7.4未満の版。影響ありとして記載：15.3.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Apple / visionOS。影響ありとして記載：2.3.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Apple / watchOS。影響ありとして記載：11.3.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E3" ] }, { "text": "「iOS and iPadOS / iPadOS / macOS / visionOS / watchOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-43200", "https://support.apple.com/en-us/122173", "https://support.apple.com/en-us/122174", "https://support.apple.com/en-us/122345", "https://support.apple.com/en-us/122346", "https://support.apple.com/en-us/122900", "https://support.apple.com/en-us/122901", "https://support.apple.com/en-us/122902", "https://support.apple.com/en-us/122903", "https://support.apple.com/en-us/122904", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-43200", "https://support.apple.com/en-us/122173", "https://support.apple.com/en-us/122174", "https://support.apple.com/en-us/122345", "https://support.apple.com/en-us/122346", "https://support.apple.com/en-us/122900", "https://support.apple.com/en-us/122901", "https://support.apple.com/en-us/122902", "https://support.apple.com/en-us/122903", "https://support.apple.com/en-us/122904", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-43200", "https://support.apple.com/en-us/122173", "https://support.apple.com/en-us/122174", "https://support.apple.com/en-us/122345", "https://support.apple.com/en-us/122346", "https://support.apple.com/en-us/122900", "https://support.apple.com/en-us/122901", "https://support.apple.com/en-us/122902", "https://support.apple.com/en-us/122903", "https://support.apple.com/en-us/122904", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-43200", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/122173", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122174", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122345", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122346", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122900", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122901", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122902", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/122903", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/122904", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.8.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"16.7.11\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.3.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"17.7.5\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"13.7.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"14.7.4\",\"versionType\":\"custom\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.3.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2.3.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43200.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"11.3.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43200", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-43200\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-43200（iOS and iPadOS / iPadOS / macOS / visionOS / watchOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・iCloudリンクで共有された写真または動画が悪意を持って作成されている場合に影響します。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：15.8.4未満の版。影響ありとして記載：16.7.11未満の版。影響ありとして記載：18.3.1未満の版。\n・公式の対象表：Apple / iPadOS。影響ありとして記載：17.7.5未満の版。\n・公式の対象表：Apple / macOS。影響ありとして記載：13.7.4未満の版。影響ありとして記載：14.7.4未満の版。影響ありとして記載：15.3.1未満の版。\n・公式の対象表：Apple / visionOS。影響ありとして記載：2.3.1未満の版。\n・公式の対象表：Apple / watchOS。影響ありとして記載：11.3.1未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-43200", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:09.435Z", "lastSuccess": "2026-10-24T04:47:09.435Z", "sourceCheckedAt": "2026-10-24T04:47:09.435Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-24016", "aliases": [], "title": "wazuh：コード実行", "summary": "Wazuhサーバーで、バージョン4.4.0から4.9.1未満までの間に、DistributedAPIのパラメータがJSONでシリアライズされ、`as_wazuh_object`でデシリアライズされる際に安全でないデシリアライズが行われ、リモートからコードを実行できる脆弱性があります。", "risk": "攻撃者がこの脆弱性を利用すると、Wazuhサーバー上で任意のPythonコードが実行され、サーバーが完全に制御される可能性があります。", "product": "wazuh", "category": "other", "component": "package", "severity": "critical", "cvss": 9.9, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "affected": [ { "product": "wazuh", "range": ">= 4.4.0, < 4.9.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-24016", "label": "CVE公式レコード" }, { "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "label": "CISAが示す関連情報" }, { "url": "https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24016", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-02-10T19:08:09.058Z", "modifiedAt": "2026-02-26T19:09:19.971Z", "fetchedAt": "2026-10-24T04:47:16.598Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.", "sourceTitle": "Remote code execution in Wazuh server", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "wazuh", "product": "wazuh", "versions": [ { "version": ">= 4.4.0, < 4.9.1", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-24016", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "fetchedAt": "2026-10-24T04:47:16.598Z", "publishedAt": "2025-02-10T19:08:09.058Z", "modifiedAt": "2026-02-26T19:09:19.971Z", "state": "published", "provider": "GitHub_M", "title": "Remote code execution in Wazuh server", "descriptions": [ { "lang": "en", "value": "Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "wazuh", "product": "wazuh", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= 4.4.0, < 4.9.1", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502: Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "label": "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"wazuh\",\"product\":\"wazuh\",\"versions\":[{\"version\":\">= 4.4.0, < 4.9.1\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"lang\":\"en\",\"description\":\"CWE-502: Deserialization of Untrusted Data\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.9,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-24016:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "sourcePath": "retained:/originalText", "text": "Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-24016:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "modifiedAt": "2025-06-10T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T19:09:19.971Z", "fetchedAt": "2026-10-24T04:47:16.598Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-10T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "wazuhにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:16.598Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "8474ece72c83696d96da0b1820e85beb436bd85162d4849a708119f4ff347956", "sourceModifiedAt": "2026-02-26T19:09:19.971Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Wazuhサーバーで、バージョン4.4.0から4.9.1未満までの間に、DistributedAPIのパラメータがJSONでシリアライズされ、`as_wazuh_object`でデシリアライズされる際に安全でないデシリアライズが行われ、リモートからコードを実行できる脆弱性があります。", "risk": "攻撃者がこの脆弱性を利用すると、Wazuhサーバー上で任意のPythonコードが実行され、サーバーが完全に制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "APIへのアクセス権を持つ者（ダッシュボードが侵害された場合やクラスター内のWazuhサーバーが侵害された場合）がリクエスト/レスポンスに未サニタイズの辞書を注入できることが必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "特定の設定下では、侵害されたエージェントでも同様に未サニタイズの辞書を注入できる場合があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：wazuh / wazuh。影響ありとして記載：>= 4.4.0, < 4.9.1。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E4" ] }, { "text": "「wazuh」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-24016", "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/", "https://nvd.nist.gov/vuln/detail/CVE-2025-24016" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-24016", "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/", "https://nvd.nist.gov/vuln/detail/CVE-2025-24016" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-24016", "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/", "https://nvd.nist.gov/vuln/detail/CVE-2025-24016" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-24016", "label": "CVE公式レコード" }, { "url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh", "label": "CISAが示す関連情報" }, { "url": "https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24016", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourceField": "/containers/cna/title", "excerpt": "Remote code execution in Wazuh server", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "sourceField": "retained:/originalText", "excerpt": "Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/24xxx/CVE-2025-24016.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"wazuh\",\"product\":\"wazuh\",\"versions\":[{\"version\":\">= 4.4.0, < 4.9.1\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-24016\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-24016（wazuh）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・APIへのアクセス権を持つ者（ダッシュボードが侵害された場合やクラスター内のWazuhサーバーが侵害された場合）がリクエスト/レスポンスに未サニタイズの辞書を注入できることが必要です。\n・特定の設定下では、侵害されたエージェントでも同様に未サニタイズの辞書を注入できる場合があります。\n・公式の対象表：wazuh / wazuh。影響ありとして記載：>= 4.4.0, < 4.9.1。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-24016", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:16.598Z", "lastSuccess": "2026-10-24T04:47:16.598Z", "sourceCheckedAt": "2026-10-24T04:47:16.598Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-33053", "aliases": [], "title": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows Server 2：コード実行", "summary": "Internet Shortcut ファイルの名前やパスを外部から制御できるため、認可されていない攻撃者がネットワーク上でコードを実行できる可能性があります。", "risk": "攻撃者がリモートの WebDAV ロケーションを WorkingDirectory 属性に指定した Internet Shortcut ファイルを利用して、コードを実行できる恐れがあります。", "product": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows Server 2", "category": "windows", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.21034（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.8148（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.7434（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.5965（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.5965（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.5472（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.5472（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.5472（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.4349（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1", "range": ">= 6.1.7601.0 / < 6.1.7601.27769（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "range": ">= 6.1.7601.0 / < 6.1.7601.27769（環境: x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.23351（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "range": ">= 6.0.6003.0 / < 6.0.6003.23351（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.25522（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.25522（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.22620（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.22620（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.8148（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.8148（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.7434（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.7434（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.3807（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.1665（環境: x64-based Systems）" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.4349（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.4349（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-33053", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053", "label": "Internet Shortcut Files Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33053", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2025-06-10T17:02:31.840Z", "modifiedAt": "2026-02-26T17:50:54.691Z", "fetchedAt": "2026-10-24T04:47:19.141Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Internet Shortcut Files Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.21034", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.5965", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.5965", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.27769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.27769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.23351", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.23351", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.25522", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.25522", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22620", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22620", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.3807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.1665", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-33053", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "fetchedAt": "2026-10-24T04:47:19.141Z", "publishedAt": "2025-06-10T17:02:31.840Z", "modifiedAt": "2026-02-26T17:50:54.691Z", "state": "published", "provider": "microsoft", "title": "Internet Shortcut Files Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.21034", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.5965", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.5965", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.5472", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.27769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.27769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/11", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.23351", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.23351", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.25522", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.25522", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22620", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22620", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.8148", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/20", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.7434", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/21", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.3807", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/22", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/22/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.1665", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/23", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/23/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/24", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/24/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.4349", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-73", "lang": "en-US", "description": "CWE-73: External Control of File Name or Path", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053", "label": "Internet Shortcut Files Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-33053", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://research.checkpoint.com/2025/stealth-falcon-zero-day/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.darkreading.com/vulnerabilities-threats/stealth-falcon-apt-exploits-microsoft-rce-zero-day-mideast", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://therecord.media/microsoft-cisa-zero-day-turkish-defense-org", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.bleepingcomputer.com/news/security/stealth-falcon-hackers-exploited-windows-webdav-zero-day-to-drop-malware/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.theregister.com/2025/06/10/microsoft_patch_tuesday_june/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-33053-mitigation-script-remote-code-execution-vulnerability-in-microsoft-webdav", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-33053-detection-script-remote-code-execution-vulnerability-in-microsoft-webdav", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.21034\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.5965\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5965\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.23351\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.23351\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25522\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25522\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22620\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22620\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.3807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/22", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1665\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/23", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/affected/24", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-73: External Control of File Name or Path\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-73\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-33053:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "sourcePath": "retained:/originalText", "text": "Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-33053:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "modifiedAt": "2025-06-10T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:50:54.691Z", "fetchedAt": "2026-10-24T04:47:19.141Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-10T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows Server 2にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:19.141Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ebe44e79feb122d64a30a4834f4f8a0494575827a49a58d82a83221816a21627", "sourceModifiedAt": "2026-02-26T17:50:54.691Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Internet Shortcut ファイルの名前やパスを外部から制御できるため、認可されていない攻撃者がネットワーク上でコードを実行できる可能性があります。", "risk": "攻撃者がリモートの WebDAV ロケーションを WorkingDirectory 属性に指定した Internet Shortcut ファイルを利用して、コードを実行できる恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.21034未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.5965未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5965未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.5472未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.5472未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.5472未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.27769未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.27769未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.23351未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.23351未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.25522未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.25522未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22620未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22620未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E24" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.3807未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E25" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1665未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E26" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E27" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E28" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053" ], "evidenceIds": [ "E29" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E4" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2025-33053", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053", "https://nvd.nist.gov/vuln/detail/CVE-2025-33053" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json" ], "evidenceIds": [ "E4" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-33053", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053", "label": "Internet Shortcut Files Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33053", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/title", "excerpt": "Internet Shortcut Files Remote Code Execution Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.21034\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.5965\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5965\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.5472\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.23351\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.23351\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25522\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25522\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22620\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22620\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.8148\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.7434\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.3807\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E26", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/22", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1665\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E27", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/23", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E28", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33053.json", "sourceField": "/containers/cna/affected/24", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.4349\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E29", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-33053", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-33053\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-33053（Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Version 24H2 / Windows Server 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.21034未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.5965未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5965未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.5472未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.5472未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.5472未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.27769未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.27769未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.23351未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.23351未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.25522未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.25522未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22620未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22620未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.8148未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.7434未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.3807未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1665未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.4349未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-33053", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:19.141Z", "lastSuccess": "2026-10-24T04:47:19.141Z", "sourceCheckedAt": "2026-10-24T04:47:19.141Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-42009", "aliases": [], "title": "n/a：ブラウザー上での不正な処理", "summary": "Roundcube Webmail 1.5.7までおよび 1.6.xから1.6.7までに存在するクロスサイトスクリプティングの脆弱性により、リモートの攻撃者が細工したメールを送ることで、被害者のメールを盗み送信できる。この脆弱性は program/actions/mail/show.php の message_body() におけるデサニタイズ不備を悪用する。", "risk": "攻撃者が被害者のメールを盗み、送信できる可能性がある。", "product": "Roundcube Webmail", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-42009", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/releases", "label": "CVE掲載の参考情報" }, { "url": "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "label": "CVE掲載の参考情報" }, { "url": "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42009", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-08-05T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:48.964Z", "fetchedAt": "2026-10-24T04:47:26.681Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-42009", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "fetchedAt": "2026-10-24T04:47:26.681Z", "publishedAt": "2024-08-05T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:48.964Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/roundcube/roundcubemail/releases", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/3" }, { "url": "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-42009", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":9.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-42009:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "sourcePath": "retained:/originalText", "text": "RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-42009:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "modifiedAt": "2025-06-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:48.964Z", "fetchedAt": "2026-10-24T04:47:26.681Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:26.681Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "28340b4129cab6f4307e1fc30a6a93e634a04bb892402267ff47d6746a407c1e", "sourceModifiedAt": "2025-10-21T22:55:48.964Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Roundcube Webmail 1.5.7までおよび 1.6.xから1.6.7までに存在するクロスサイトスクリプティングの脆弱性により、リモートの攻撃者が細工したメールを送ることで、被害者のメールを盗み送信できる。この脆弱性は program/actions/mail/show.php の message_body() におけるデサニタイズ不備を悪用する。", "risk": "攻撃者が被害者のメールを盗み、送信できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Roundcube Webmail」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-42009", "https://github.com/roundcube/roundcubemail/releases", "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "https://nvd.nist.gov/vuln/detail/CVE-2024-42009" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-42009", "https://github.com/roundcube/roundcubemail/releases", "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "https://nvd.nist.gov/vuln/detail/CVE-2024-42009" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-42009", "https://github.com/roundcube/roundcubemail/releases", "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "https://nvd.nist.gov/vuln/detail/CVE-2024-42009" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-42009", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/releases", "label": "CVE掲載の参考情報" }, { "url": "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.8", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.8", "label": "CVE掲載の参考情報" }, { "url": "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42009", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "sourceField": "retained:/originalText", "excerpt": "RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/42xxx/CVE-2024-42009.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-42009", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-42009\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-42009（Roundcube Webmail）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-42009", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:26.681Z", "lastSuccess": "2026-10-24T04:47:26.681Z", "sourceCheckedAt": "2026-10-24T04:47:26.681Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-32433", "aliases": [], "title": "otp：コード実行", "summary": "Erlang/OTP の SSH サーバーは、OTP-27.3.3、OTP-26.2.5.11、OTP-25.3.2.20 より前のバージョンでは、認証なしで攻撃者がリモートコード実行（RCE）を行える可能性があります。SSH プロトコルメッセージの処理に欠陥があるため、悪意のある者が正当な資格情報なしにシステムへ不正にアクセスし、任意のコマンドを実行できるようになります。", "risk": "認証されていない攻撃者がシステムに不正にアクセスし、任意のコマンドを実行できるようになる可能性があります。", "product": "otp", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "otp", "range": ">= OTP-27.0-rc1, < OTP-27.3.3" }, { "product": "otp", "range": ">= OTP-26.0-rc1, < OTP-26.2.5.11" }, { "product": "otp", "range": "< OTP-25.3.2.20" } ], "fixed": [], "steps": [ "OTP-27.3.3、OTP-26.2.5.11、OTP-25.3.2.20 以降のバージョンにアップデートしてください。", "「CVE-2025-32433」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32433", "label": "CVE公式レコード" }, { "url": "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "label": "CISAが示す関連情報" }, { "url": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "label": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12" }, { "url": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "label": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f" }, { "url": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "label": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32433", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-04-16T21:34:37.457Z", "modifiedAt": "2026-02-26T18:28:12.084Z", "fetchedAt": "2026-10-24T04:47:27.273Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.", "sourceTitle": "Erlang/OTP SSH Vulnerable to Pre-Authentication RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "erlang", "product": "otp", "versions": [ { "version": ">= OTP-27.0-rc1, < OTP-27.3.3", "status": "affected" }, { "version": ">= OTP-26.0-rc1, < OTP-26.2.5.11", "status": "affected" }, { "version": "< OTP-25.3.2.20", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-32433", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "fetchedAt": "2026-10-24T04:47:27.273Z", "publishedAt": "2025-04-16T21:34:37.457Z", "modifiedAt": "2026-02-26T18:28:12.084Z", "state": "published", "provider": "GitHub_M", "title": "Erlang/OTP SSH Vulnerable to Pre-Authentication RCE", "descriptions": [ { "lang": "en", "value": "Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "erlang", "product": "otp", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= OTP-27.0-rc1, < OTP-27.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": ">= OTP-26.0-rc1, < OTP-26.2.5.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "< OTP-25.3.2.20", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "label": "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "label": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "label": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "label": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2025/04/16/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://www.openwall.com/lists/oss-security/2025/04/18/1", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.openwall.com/lists/oss-security/2025/04/18/2", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.openwall.com/lists/oss-security/2025/04/18/6", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2025/04/19/1", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://security.netapp.com/advisory/ntap-20250425-0001/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"erlang\",\"product\":\"otp\",\"versions\":[{\"version\":\">= OTP-27.0-rc1, < OTP-27.3.3\",\"status\":\"affected\"},{\"version\":\">= OTP-26.0-rc1, < OTP-26.2.5.11\",\"status\":\"affected\"},{\"version\":\"< OTP-25.3.2.20\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-306\",\"lang\":\"en\",\"description\":\"CWE-306: Missing Authentication for Critical Function\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-32433:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "sourcePath": "retained:/originalText", "text": "Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-32433:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "modifiedAt": "2025-06-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:28:12.084Z", "fetchedAt": "2026-10-24T04:47:27.273Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "otpにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:27.273Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "eb67b5c66cd0fa1bce23acbe442f4bbcba2ef5822a8bb6dc8c8c0d8cbcbefa4f", "sourceModifiedAt": "2026-02-26T18:28:12.084Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Erlang/OTP の SSH サーバーは、OTP-27.3.3、OTP-26.2.5.11、OTP-25.3.2.20 より前のバージョンでは、認証なしで攻撃者がリモートコード実行（RCE）を行える可能性があります。SSH プロトコルメッセージの処理に欠陥があるため、悪意のある者が正当な資格情報なしにシステムへ不正にアクセスし、任意のコマンドを実行できるようになります。", "risk": "認証されていない攻撃者がシステムに不正にアクセスし、任意のコマンドを実行できるようになる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "SSH サーバーが有効化されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は認証情報を持たずに接続できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "SSH プロトコルのメッセージ処理に欠陥が存在すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：erlang / otp。影響ありとして記載：>= OTP-27.0-rc1, < OTP-27.3.3。影響ありとして記載：>= OTP-26.0-rc1, < OTP-26.2.5.11。影響ありとして記載：< OTP-25.3.2.20。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E3" ] }, { "text": "「otp」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32433", "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "https://nvd.nist.gov/vuln/detail/CVE-2025-32433" ] } ], "actions": [ { "text": "OTP-27.3.3、OTP-26.2.5.11、OTP-25.3.2.20 以降のバージョンにアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2025-32433」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-32433", "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "https://nvd.nist.gov/vuln/detail/CVE-2025-32433" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32433", "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "https://nvd.nist.gov/vuln/detail/CVE-2025-32433" ] } ], "temporaryMitigations": [ { "text": "SSH サーバーを無効化するか、ファイアウォールでアクセスを遮断してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32433", "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "https://nvd.nist.gov/vuln/detail/CVE-2025-32433" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32433", "label": "CVE公式レコード" }, { "url": "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", "label": "CISAが示す関連情報" }, { "url": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12", "label": "https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12" }, { "url": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f", "label": "https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f" }, { "url": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891", "label": "https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32433", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourceField": "/containers/cna/title", "excerpt": "Erlang/OTP SSH Vulnerable to Pre-Authentication RCE", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32433.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"erlang\",\"product\":\"otp\",\"versions\":[{\"version\":\">= OTP-27.0-rc1, < OTP-27.3.3\",\"status\":\"affected\"},{\"version\":\">= OTP-26.0-rc1, < OTP-26.2.5.11\",\"status\":\"affected\"},{\"version\":\"< OTP-25.3.2.20\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32433", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-32433\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-32433（otp）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・SSH サーバーが有効化されていること。\n・攻撃者は認証情報を持たずに接続できること。\n・SSH プロトコルのメッセージ処理に欠陥が存在すること。\n・公式の対象表：erlang / otp。影響ありとして記載：>= OTP-27.0-rc1, < OTP-27.3.3。影響ありとして記載：>= OTP-26.0-rc1, < OTP-26.2.5.11。影響ありとして記載：< OTP-25.3.2.20。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-32433", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:27.273Z", "lastSuccess": "2026-10-24T04:47:27.273Z", "sourceCheckedAt": "2026-10-24T04:47:27.273Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-5419", "aliases": [], "title": "Chrome：脆弱性情報", "summary": "Google Chrome の V8 エンジンにおいて、バージョン 137.0.7151.68 未満で境界外読み書きが発生し、細工した HTML ページを介してリモートの攻撃者がヒープ破壊を引き起こす可能性があります。", "risk": "ヒープ破壊が起こると、ブラウザーのメモリが不正に書き換えられ、攻撃者が制御できる状態になる恐れがあります。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 137.0.7151.68 / < 137.0.7151.68" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-5419", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/420636529", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5419", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-02T23:36:53.221Z", "modifiedAt": "2026-02-26T18:27:41.227Z", "fetchedAt": "2026-10-24T08:41:45.932Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "137.0.7151.68", "status": "affected", "lessThan": "137.0.7151.68", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-5419", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "fetchedAt": "2026-10-24T08:41:45.932Z", "publishedAt": "2025-06-02T23:36:53.221Z", "modifiedAt": "2026-02-26T18:27:41.227Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "137.0.7151.68", "lessThan": "137.0.7151.68", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Out of bounds read and write", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/0" }, { "url": "https://issues.chromium.org/issues/420636529", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5419", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5419", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"137.0.7151.68\",\"status\":\"affected\",\"lessThan\":\"137.0.7151.68\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Out of bounds read and write\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-5419:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "sourcePath": "retained:/originalText", "text": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-5419:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "modifiedAt": "2025-06-05T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:27:41.227Z", "fetchedAt": "2026-10-24T08:41:45.932Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-05T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:41:45.932Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "bbe9110305bdba04707361ef7316956ac5846caf34d40190ce68f70c01e78a71", "sourceModifiedAt": "2026-02-26T18:27:41.227Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome の V8 エンジンにおいて、バージョン 137.0.7151.68 未満で境界外読み書きが発生し、細工した HTML ページを介してリモートの攻撃者がヒープ破壊を引き起こす可能性があります。", "risk": "ヒープ破壊が起こると、ブラウザーのメモリが不正に書き換えられ、攻撃者が制御できる状態になる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者はリモートから細工した HTML ページを提供できる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は Google Chrome のバージョン 137.0.7151.68 未満に含まれる V8 エンジンです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "同様の Chromium ベースのブラウザー（例: Microsoft Edge、Opera）でも影響を受ける可能性があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも137.0.7151.68で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-5419", "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "https://issues.chromium.org/issues/420636529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "https://nvd.nist.gov/vuln/detail/CVE-2025-5419" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-5419", "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "https://issues.chromium.org/issues/420636529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "https://nvd.nist.gov/vuln/detail/CVE-2025-5419" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-5419", "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "https://issues.chromium.org/issues/420636529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "https://nvd.nist.gov/vuln/detail/CVE-2025-5419" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-5419", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/420636529", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5419", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "sourceField": "retained:/originalText", "excerpt": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5419.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"137.0.7151.68\",\"status\":\"affected\",\"lessThan\":\"137.0.7151.68\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5419", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-5419\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-5419（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はリモートから細工した HTML ページを提供できる必要があります。\n・対象は Google Chrome のバージョン 137.0.7151.68 未満に含まれる V8 エンジンです。\n・同様の Chromium ベースのブラウザー（例: Microsoft Edge、Opera）でも影響を受ける可能性があります。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも137.0.7151.68で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-5419", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:41:45.932Z", "lastSuccess": "2026-10-24T08:41:45.932Z", "sourceCheckedAt": "2026-10-24T08:41:45.932Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-21479", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "GPUマイクロノードで特定のコマンド列を実行する際に、権限が不適切にチェックされ、未承認のコマンドが実行され、メモリ破損が起こります。", "risk": "GPUマイクロノードでメモリ破損が発生する可能性があります。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "AQT1000（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6200（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCM4490（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCS4490（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SD855（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM4635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6250（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6650（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6650P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7325P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7675（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7675P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8550P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8635P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8650Q（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 1 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 460 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 480 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 662 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 690 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 695 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 720G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 778G 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 782G Mobile Platform (SM7325-AF)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 7c+ Gen 3 Compute（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 2 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 3 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 2 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 855 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon AR1 Gen 1 Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon AR1 Gen 1 Platform \"Luna1\"（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2230P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2250P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2330P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9378（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9390（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6450（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6650（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6755（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN7861（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN7881（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8840（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8845（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8845H（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-21479", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21479", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-03T06:42:42.042Z", "modifiedAt": "2026-02-26T18:27:39.157Z", "fetchedAt": "2026-10-24T04:47:33.218Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourceTitle": "Incorrect Authorization in Graphics", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "AQT1000" }, { "status": "affected", "version": "FastConnect 6200" }, { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCM4490" }, { "status": "affected", "version": "QCS4490" }, { "status": "affected", "version": "SD855" }, { "status": "affected", "version": "SM4635" }, { "status": "affected", "version": "SM6250" }, { "status": "affected", "version": "SM6650" }, { "status": "affected", "version": "SM6650P" }, { "status": "affected", "version": "SM7325P" }, { "status": "affected", "version": "SM7635" }, { "status": "affected", "version": "SM7675" }, { "status": "affected", "version": "SM7675P" }, { "status": "affected", "version": "SM8550P" }, { "status": "affected", "version": "SM8635" }, { "status": "affected", "version": "SM8635P" }, { "status": "affected", "version": "SM8650Q" }, { "status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 460 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)" }, { "status": "affected", "version": "Snapdragon 662 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 690 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 695 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 720G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)" }, { "status": "affected", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)" }, { "status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute" }, { "status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon AR1 Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon AR1 Gen 1 Platform \"Luna1\"" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "SXR2230P" }, { "status": "affected", "version": "SXR2250P" }, { "status": "affected", "version": "SXR2330P" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9378" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9390" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN6450" }, { "status": "affected", "version": "WCN6650" }, { "status": "affected", "version": "WCN6755" }, { "status": "affected", "version": "WCN7861" }, { "status": "affected", "version": "WCN7881" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" }, { "status": "affected", "version": "WSA8840" }, { "status": "affected", "version": "WSA8845" }, { "status": "affected", "version": "WSA8845H" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-21479", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "fetchedAt": "2026-10-24T04:47:33.218Z", "publishedAt": "2025-06-03T06:42:42.042Z", "modifiedAt": "2026-02-26T18:27:39.157Z", "state": "published", "provider": "qualcomm", "title": "Incorrect Authorization in Graphics", "descriptions": [ { "lang": "en", "value": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "AQT1000", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "FastConnect 6200", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "QCM4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "QCS4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "SD855", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "SM4635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "SM6250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "SM6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "SM6650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "SM7325P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "SM7635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "SM7675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "SM7675P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "SM8550P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "SM8635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "SM8635P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "SM8650Q", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "Snapdragon 4 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "Snapdragon 460 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "Snapdragon 480 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "Snapdragon 662 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "Snapdragon 690 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "Snapdragon 695 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "Snapdragon 720G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "Snapdragon 778G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "Snapdragon 7c+ Gen 3 Compute", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "Snapdragon 8 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "Snapdragon 8 Gen 3 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "Snapdragon 8+ Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "Snapdragon 855 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "Snapdragon AR1 Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "Snapdragon AR1 Gen 1 Platform \"Luna1\"", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "SXR2230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "SXR2250P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "SXR2330P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "WCD9378", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "WCD9390", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "WCN6450", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "WCN6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "WCN6755", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "WCN7861", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "WCN7881", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "WSA8835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "WSA8840", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "WSA8845", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "WSA8845H", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "qualcomm", "tags": [], "provider": "qualcomm", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21479", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon CCW\",\"Snapdragon Compute\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SM4635\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7675\"},{\"status\":\"affected\",\"version\":\"SM7675P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"SM8635\"},{\"status\":\"affected\",\"version\":\"SM8635P\"},{\"status\":\"affected\",\"version\":\"SM8650Q\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 3 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform \\\"Luna1\\\"\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"SXR2250P\"},{\"status\":\"affected\",\"version\":\"SXR2330P\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6450\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WCN7861\"},{\"status\":\"affected\",\"version\":\"WCN7881\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-863\",\"description\":\"CWE-863: Incorrect Authorization\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-21479:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-21479:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:27:39.157Z", "fetchedAt": "2026-10-24T04:47:33.218Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:33.218Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7e8babb198b49cd873770a74f0c263a817f487c1c9c4b6239cf9def8e18879e6", "sourceModifiedAt": "2026-02-26T18:27:39.157Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GPUマイクロノードで特定のコマンド列を実行する際に、権限が不適切にチェックされ、未承認のコマンドが実行され、メモリ破損が起こります。", "risk": "GPUマイクロノードでメモリ破損が発生する可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E2", "E3" ], "applicability": [ { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AQT1000。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA6391。影響ありとして記載：QCM4490。影響ありとして記載：QCS4490。影響ありとして記載：SD855。影響ありとして記載：SM4635。影響ありとして記載：SM6250。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7325P。影響ありとして記載：SM7635。影響ありとして記載：SM7675。影響ありとして記載：SM7675P。影響ありとして記載：SM8550P。影響ありとして記載：SM8635。影響ありとして記載：SM8635P。影響ありとして記載：SM8650Q。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：SXR2230P。影響ありとして記載：SXR2250P。影響ありとして記載：SXR2330P。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3988。影響ありとして記載：WCN6450。影響ありとして記載：WCN6650。影響ありとして記載：WCN6755。影響ありとして記載：WCN7861。影響ありとして記載：WCN7881。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon CCW、Snapdragon Compute、Snapdragon Industrial IOT、Snapdragon Mobile", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-21479", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "https://nvd.nist.gov/vuln/detail/CVE-2025-21479" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-21479", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "https://nvd.nist.gov/vuln/detail/CVE-2025-21479" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-21479", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "https://nvd.nist.gov/vuln/detail/CVE-2025-21479" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-21479", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21479", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourceField": "/containers/cna/title", "excerpt": "Incorrect Authorization in Graphics", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "sourceField": "retained:/originalText", "excerpt": "Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21479.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon CCW\",\"Snapdragon Compute\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SM4635\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7675\"},{\"status\":\"affected\",\"version\":\"SM7675P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"SM8635\"},{\"status\":\"affected\",\"version\":\"SM8635P\"},{\"status\":\"affected\",\"version\":\"SM8650Q\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 3 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform \\\"Luna1\\\"\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"SXR2250P\"},{\"status\":\"affected\",\"version\":\"SXR2330P\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6450\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WCN7861\"},{\"status\":\"affected\",\"version\":\"WCN7881\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21479", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-21479\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-21479（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AQT1000。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA6391。影響ありとして記載：QCM4490。影響ありとして記載：QCS4490。影響ありとして記載：SD855。影響ありとして記載：SM4635。影響ありとして記載：SM6250。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7325P。影響ありとして記載：SM7635。影響ありとして記載：SM7675。影響ありとして記載：SM7675P。影響ありとして記載：SM8550P。影響ありとして記載：SM8635。影響ありとして記載：SM8635P。影響ありとして記載：SM8650Q。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：SXR2230P。影響ありとして記載：SXR2250P。影響ありとして記載：SXR2330P。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3988。影響ありとして記載：WCN6450。影響ありとして記載：WCN6650。影響ありとして記載：WCN6755。影響ありとして記載：WCN7861。影響ありとして記載：WCN7881。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon CCW、Snapdragon Compute、Snapdragon Industrial IOT、Snapdragon Mobile\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-21479", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:33.218Z", "lastSuccess": "2026-10-24T04:47:33.218Z", "sourceCheckedAt": "2026-10-24T04:47:33.218Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-21480", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "GPUマイクロノードで特定のコマンド列を実行中に、権限のないコマンドが実行され、メモリ破損が起こる不正な認可の問題です。", "risk": "メモリが破損し、システムが不安定になる可能性があります。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "AQT1000（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6200（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCM4490（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "QCS4490（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SC8380XP（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SD855（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM4635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6250（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6650（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM6650P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7325P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7675（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM7675P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8550P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8635（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8635P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SM8650Q（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 1 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 460 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 480 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 662 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 690 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 695 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 720G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 778G 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 782G Mobile Platform (SM7325-AF)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 7c+ Gen 3 Compute（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 2 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 3 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 8+ Gen 2 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 855 Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon AR1 Gen 1 Platform（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon AR1 Gen 1 Platform \"Luna1\"（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2230P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2250P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "SXR2330P（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9378（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9390（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6450（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6650（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN6755（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN7861（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WCN7881（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8840（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8845（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" }, { "product": "Snapdragon", "range": "WSA8845H（環境: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-21480", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21480", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-03T05:53:00.920Z", "modifiedAt": "2026-02-26T18:27:40.561Z", "fetchedAt": "2026-10-24T08:02:10.698Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourceTitle": "Incorrect Authorization in Graphics Windows", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "AQT1000" }, { "status": "affected", "version": "FastConnect 6200" }, { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCM4490" }, { "status": "affected", "version": "QCS4490" }, { "status": "affected", "version": "SC8380XP" }, { "status": "affected", "version": "SD855" }, { "status": "affected", "version": "SM4635" }, { "status": "affected", "version": "SM6250" }, { "status": "affected", "version": "SM6650" }, { "status": "affected", "version": "SM6650P" }, { "status": "affected", "version": "SM7325P" }, { "status": "affected", "version": "SM7635" }, { "status": "affected", "version": "SM7675" }, { "status": "affected", "version": "SM7675P" }, { "status": "affected", "version": "SM8550P" }, { "status": "affected", "version": "SM8635" }, { "status": "affected", "version": "SM8635P" }, { "status": "affected", "version": "SM8650Q" }, { "status": "affected", "version": "Snapdragon 4 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 460 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)" }, { "status": "affected", "version": "Snapdragon 662 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 690 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 695 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 720G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)" }, { "status": "affected", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)" }, { "status": "affected", "version": "Snapdragon 7c+ Gen 3 Compute" }, { "status": "affected", "version": "Snapdragon 8 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8 Gen 3 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 8+ Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon AR1 Gen 1 Platform" }, { "status": "affected", "version": "Snapdragon AR1 Gen 1 Platform \"Luna1\"" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "SXR2230P" }, { "status": "affected", "version": "SXR2250P" }, { "status": "affected", "version": "SXR2330P" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9378" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9390" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN6450" }, { "status": "affected", "version": "WCN6650" }, { "status": "affected", "version": "WCN6755" }, { "status": "affected", "version": "WCN7861" }, { "status": "affected", "version": "WCN7881" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" }, { "status": "affected", "version": "WSA8840" }, { "status": "affected", "version": "WSA8845" }, { "status": "affected", "version": "WSA8845H" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon CCW / Snapdragon Compute / Snapdragon Industrial IOT / Snapdragon Mobile。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-21480", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "fetchedAt": "2026-10-24T08:02:10.698Z", "publishedAt": "2025-06-03T05:53:00.920Z", "modifiedAt": "2026-02-26T18:27:40.561Z", "state": "published", "provider": "qualcomm", "title": "Incorrect Authorization in Graphics Windows", "descriptions": [ { "lang": "en", "value": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon CCW", "Snapdragon Compute", "Snapdragon Industrial IOT", "Snapdragon Mobile" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "AQT1000", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "FastConnect 6200", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "QCM4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "QCS4490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "SC8380XP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "SD855", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "SM4635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "SM6250", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "SM6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "SM6650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "SM7325P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "SM7635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "SM7675", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "SM7675P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "SM8550P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "SM8635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "SM8635P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "SM8650Q", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "Snapdragon 4 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "Snapdragon 460 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "Snapdragon 480 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "Snapdragon 662 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "Snapdragon 690 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "Snapdragon 695 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "Snapdragon 720G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "Snapdragon 778G 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "Snapdragon 782G Mobile Platform (SM7325-AF)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "Snapdragon 7c+ Gen 3 Compute", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "Snapdragon 8 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "Snapdragon 8 Gen 3 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "Snapdragon 8+ Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "Snapdragon 855 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "Snapdragon AR1 Gen 1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "Snapdragon AR1 Gen 1 Platform \"Luna1\"", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "SXR2230P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "SXR2250P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "SXR2330P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "WCD9378", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "WCD9390", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "WCN6450", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "WCN6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "WCN6755", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "WCN7861", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "WCN7881", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "WSA8835", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "WSA8840", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "WSA8845", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "WSA8845H", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "qualcomm", "tags": [], "provider": "qualcomm", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21480", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon CCW\",\"Snapdragon Compute\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"SC8380XP\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SM4635\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7675\"},{\"status\":\"affected\",\"version\":\"SM7675P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"SM8635\"},{\"status\":\"affected\",\"version\":\"SM8635P\"},{\"status\":\"affected\",\"version\":\"SM8650Q\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 3 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform \\\"Luna1\\\"\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"SXR2250P\"},{\"status\":\"affected\",\"version\":\"SXR2330P\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6450\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WCN7861\"},{\"status\":\"affected\",\"version\":\"WCN7881\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-863\",\"description\":\"CWE-863: Incorrect Authorization\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-21480:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-21480:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:27:40.561Z", "fetchedAt": "2026-10-24T08:02:10.698Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:02:10.698Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ad02e9f90a1d081e0507d4488593a1f5fefbc820c6b92433bdb9560b910db024", "sourceModifiedAt": "2026-02-26T18:27:40.561Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GPUマイクロノードで特定のコマンド列を実行中に、権限のないコマンドが実行され、メモリ破損が起こる不正な認可の問題です。", "risk": "メモリが破損し、システムが不安定になる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者がGPUマイクロノードに対して特定のコマンド列を送信できる場合に成立します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AQT1000。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA6391。影響ありとして記載：QCM4490。影響ありとして記載：QCS4490。影響ありとして記載：SC8380XP。影響ありとして記載：SD855。影響ありとして記載：SM4635。影響ありとして記載：SM6250。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7325P。影響ありとして記載：SM7635。影響ありとして記載：SM7675。影響ありとして記載：SM7675P。影響ありとして記載：SM8550P。影響ありとして記載：SM8635。影響ありとして記載：SM8635P。影響ありとして記載：SM8650Q。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：SXR2230P。影響ありとして記載：SXR2250P。影響ありとして記載：SXR2330P。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3988。影響ありとして記載：WCN6450。影響ありとして記載：WCN6650。影響ありとして記載：WCN6755。影響ありとして記載：WCN7861。影響ありとして記載：WCN7881。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon CCW、Snapdragon Compute、Snapdragon Industrial IOT、Snapdragon Mobile", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-21480", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "https://nvd.nist.gov/vuln/detail/CVE-2025-21480" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-21480", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "https://nvd.nist.gov/vuln/detail/CVE-2025-21480" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-21480", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "https://nvd.nist.gov/vuln/detail/CVE-2025-21480" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-21480", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21480", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourceField": "/containers/cna/title", "excerpt": "Incorrect Authorization in Graphics Windows", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/21xxx/CVE-2025-21480.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon CCW\",\"Snapdragon Compute\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AQT1000\"},{\"status\":\"affected\",\"version\":\"FastConnect 6200\"},{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM4490\"},{\"status\":\"affected\",\"version\":\"QCS4490\"},{\"status\":\"affected\",\"version\":\"SC8380XP\"},{\"status\":\"affected\",\"version\":\"SD855\"},{\"status\":\"affected\",\"version\":\"SM4635\"},{\"status\":\"affected\",\"version\":\"SM6250\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7325P\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7675\"},{\"status\":\"affected\",\"version\":\"SM7675P\"},{\"status\":\"affected\",\"version\":\"SM8550P\"},{\"status\":\"affected\",\"version\":\"SM8635\"},{\"status\":\"affected\",\"version\":\"SM8635P\"},{\"status\":\"affected\",\"version\":\"SM8650Q\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 460 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 480+ 5G Mobile Platform (SM4350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 662 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 690 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 695 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 720G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 782G Mobile Platform (SM7325-AF)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 7c+ Gen 3 Compute\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 3 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8+ Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 855+/860 Mobile Platform (SM8150-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon AR1 Gen 1 Platform \\\"Luna1\\\"\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"SXR2230P\"},{\"status\":\"affected\",\"version\":\"SXR2250P\"},{\"status\":\"affected\",\"version\":\"SXR2330P\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9390\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6450\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WCN7861\"},{\"status\":\"affected\",\"version\":\"WCN7881\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"},{\"status\":\"affected\",\"version\":\"WSA8840\"},{\"status\":\"affected\",\"version\":\"WSA8845\"},{\"status\":\"affected\",\"version\":\"WSA8845H\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-21480", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-21480\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-21480（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者がGPUマイクロノードに対して特定のコマンド列を送信できる場合に成立します。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AQT1000。影響ありとして記載：FastConnect 6200。影響ありとして記載：FastConnect 6700。影響ありとして記載：FastConnect 6800。影響ありとして記載：FastConnect 6900。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA6391。影響ありとして記載：QCM4490。影響ありとして記載：QCS4490。影響ありとして記載：SC8380XP。影響ありとして記載：SD855。影響ありとして記載：SM4635。影響ありとして記載：SM6250。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7325P。影響ありとして記載：SM7635。影響ありとして記載：SM7675。影響ありとして記載：SM7675P。影響ありとして記載：SM8550P。影響ありとして記載：SM8635。影響ありとして記載：SM8635P。影響ありとして記載：SM8650Q。影響ありとして記載：Snapdragon 480+ 5G Mobile Platform (SM4350-AC)。影響ありとして記載：Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)。影響ありとして記載：Snapdragon 7c+ Gen 3 Compute。影響ありとして記載：Snapdragon 855+/860 Mobile Platform (SM8150-AC)。影響ありとして記載：Snapdragon 865+ 5G Mobile Platform (SM8250-AB)。影響ありとして記載：Snapdragon 888+ 5G Mobile Platform (SM8350-AC)。影響ありとして記載：SXR2230P。影響ありとして記載：SXR2250P。影響ありとして記載：SXR2330P。影響ありとして記載：WCD9341。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9380。影響ありとして記載：WCD9385。影響ありとして記載：WCD9390。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3988。影響ありとして記載：WCN6450。影響ありとして記載：WCN6650。影響ありとして記載：WCN6755。影響ありとして記載：WCN7861。影響ありとして記載：WCN7881。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。影響ありとして記載：WSA8840。影響ありとして記載：WSA8845。影響ありとして記載：WSA8845H。対象の環境：Snapdragon CCW、Snapdragon Compute、Snapdragon Industrial IOT、Snapdragon Mobile\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-21480", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:02:20.024Z", "lastSuccess": "2026-10-24T08:02:10.698Z", "sourceCheckedAt": "2026-10-24T08:02:10.698Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-27038", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "Adreno GPU ドライバーを使用した Chrome のグラフィック描画中にメモリ破壊が発生する Use‑After‑Free 脆弱性です。", "risk": "メモリが破壊され、グラフィック描画が正しく行われなくなる可能性があります。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "AR8031（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6620（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "CSRA6640（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA2066（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM6125（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCM8550（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9011（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCN9012（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS6125（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS8550（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcommr Video Collaboration VC1 Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM6475（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM6650（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM6650P（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7435（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7635（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SM7635P（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Smart Audio 400 Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 4 Gen 2 Mobile Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 6 Gen 1 Mobile Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon W5+ Gen 1 Wearable Platform（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100P（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9335（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9378（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9395（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3980（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN6650（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN6740（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN6755（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8832（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-27038", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27038", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-03T05:53:06.692Z", "modifiedAt": "2026-02-26T18:27:39.591Z", "fetchedAt": "2026-10-24T04:47:41.189Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "sourceTitle": "Use After Free in Graphics", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "AR8031" }, { "status": "affected", "version": "CSRA6620" }, { "status": "affected", "version": "CSRA6640" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "QCA2066" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCM6125" }, { "status": "affected", "version": "QCM8550" }, { "status": "affected", "version": "QCN9011" }, { "status": "affected", "version": "QCN9012" }, { "status": "affected", "version": "QCS6125" }, { "status": "affected", "version": "QCS8550" }, { "status": "affected", "version": "Qualcommr Video Collaboration VC1 Platform" }, { "status": "affected", "version": "SM6475" }, { "status": "affected", "version": "SM6650" }, { "status": "affected", "version": "SM6650P" }, { "status": "affected", "version": "SM7435" }, { "status": "affected", "version": "SM7635" }, { "status": "affected", "version": "SM7635P" }, { "status": "affected", "version": "Smart Audio 400 Platform" }, { "status": "affected", "version": "Snapdragon 4 Gen 2 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 6 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon W5+ Gen 1 Wearable Platform" }, { "status": "affected", "version": "SW5100" }, { "status": "affected", "version": "SW5100P" }, { "status": "affected", "version": "WCD9335" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9378" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCD9395" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3980" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN6650" }, { "status": "affected", "version": "WCN6740" }, { "status": "affected", "version": "WCN6755" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8832" }, { "status": "affected", "version": "WSA8835" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Voice & Music / Snapdragon Wearables。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-27038", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "fetchedAt": "2026-10-24T04:47:41.189Z", "publishedAt": "2025-06-03T05:53:06.692Z", "modifiedAt": "2026-02-26T18:27:39.591Z", "state": "published", "provider": "qualcomm", "title": "Use After Free in Graphics", "descriptions": [ { "lang": "en", "value": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Voice & Music", "Snapdragon Wearables" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "AR8031", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "CSRA6620", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "CSRA6640", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "QCA2066", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "QCM6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "QCM8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "QCN9011", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "QCN9012", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "QCS6125", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "QCS8550", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "Qualcommr Video Collaboration VC1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "SM6475", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "SM6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "SM6650P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "SM7435", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "SM7635", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "SM7635P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "Smart Audio 400 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "Snapdragon 4 Gen 2 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "Snapdragon 6 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "Snapdragon W5+ Gen 1 Wearable Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "SW5100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "SW5100P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "WCD9335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "WCD9378", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "WCD9395", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "WCN3980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "WCN6650", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "WCN6740", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "WCN6755", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "WSA8832", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "WSA8835", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use After Free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "qualcomm", "tags": [], "provider": "qualcomm", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA2066\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"Qualcommr Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"SM6475\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7435\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7635P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 6 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-416\",\"description\":\"CWE-416 Use After Free\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-27038:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-27038:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:27:39.591Z", "fetchedAt": "2026-10-24T04:47:41.189Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:41.189Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ef0853cfad3755d987dc957eff268388c94c1bec79b4cd5e411eb6b02bb81941", "sourceModifiedAt": "2026-02-26T18:27:39.591Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adreno GPU ドライバーを使用した Chrome のグラフィック描画中にメモリ破壊が発生する Use‑After‑Free 脆弱性です。", "risk": "メモリが破壊され、グラフィック描画が正しく行われなくなる可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "影響を受けるプラットフォームは、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables、AR8031、CSRA6620、CSRA6640、FastConnect 7800、QCA2066、QCA6391、QCM6125、QCM8550、QCN9011、QCN9012、QCS6125、QCS8550、Qualcommr Video Collaboration VC1 Platform、SM6475、SM6650、SM6650P、SM7435、SM7635、SM7635P、Smart Audio 400 Platform、Snapdragon 4 Gen 2 Mobile Platform、Snapdragon 6 Gen 1 Mobile Platform、Snapdragon 680 4G Mobile Platform、Snapdragon 685 4G Mobile Platform (SM6225-AD)、Snapdragon W5+ Gen 1 Wearable Platform、SW5100、SW5100P、WCD9335、WCD9370、WCD9375、WCD9378、WCD9385、WCD9395、WCN3950、WCN3980、WCN3988、WCN6650、WCN6740、WCN6755、WSA8810、WSA8815、WSA8830、WSA8832、WSA8835 が対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json" ], "evidenceIds": [ "E4", "E3" ] }, { "text": "公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AR8031。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA2066。影響ありとして記載：QCA6391。影響ありとして記載：QCM6125。影響ありとして記載：QCM8550。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCS6125。影響ありとして記載：QCS8550。影響ありとして記載：SM6475。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7435。影響ありとして記載：SM7635。影響ありとして記載：SM7635P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：WCD9335。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9385。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN6650。影響ありとして記載：WCN6740。影響ありとして記載：WCN6755。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。対象の環境：Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-27038", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "https://nvd.nist.gov/vuln/detail/CVE-2025-27038" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-27038", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "https://nvd.nist.gov/vuln/detail/CVE-2025-27038" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-27038", "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "https://nvd.nist.gov/vuln/detail/CVE-2025-27038" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "label": "CVE：qualcomm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-27038", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27038", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "sourceField": "retained:/originalText", "excerpt": "Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourceField": "/containers/cna/title", "excerpt": "Use After Free in Graphics", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/27xxx/CVE-2025-27038.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Voice & Music\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"AR8031\"},{\"status\":\"affected\",\"version\":\"CSRA6620\"},{\"status\":\"affected\",\"version\":\"CSRA6640\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QCA2066\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCM6125\"},{\"status\":\"affected\",\"version\":\"QCM8550\"},{\"status\":\"affected\",\"version\":\"QCN9011\"},{\"status\":\"affected\",\"version\":\"QCN9012\"},{\"status\":\"affected\",\"version\":\"QCS6125\"},{\"status\":\"affected\",\"version\":\"QCS8550\"},{\"status\":\"affected\",\"version\":\"Qualcommr Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"SM6475\"},{\"status\":\"affected\",\"version\":\"SM6650\"},{\"status\":\"affected\",\"version\":\"SM6650P\"},{\"status\":\"affected\",\"version\":\"SM7435\"},{\"status\":\"affected\",\"version\":\"SM7635\"},{\"status\":\"affected\",\"version\":\"SM7635P\"},{\"status\":\"affected\",\"version\":\"Smart Audio 400 Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 4 Gen 2 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 6 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon W5+ Gen 1 Wearable Platform\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9378\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCD9395\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN6650\"},{\"status\":\"affected\",\"version\":\"WCN6740\"},{\"status\":\"affected\",\"version\":\"WCN6755\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8832\"},{\"status\":\"affected\",\"version\":\"WSA8835\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-27038", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-27038\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-27038（Snapdragon）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受けるプラットフォームは、Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables、AR8031、CSRA6620、CSRA6640、FastConnect 7800、QCA2066、QCA6391、QCM6125、QCM8550、QCN9011、QCN9012、QCS6125、QCS8550、Qualcommr Video Collaboration VC1 Platform、SM6475、SM6650、SM6650P、SM7435、SM7635、SM7635P、Smart Audio 400 Platform、Snapdragon 4 Gen 2 Mobile Platform、Snapdragon 6 Gen 1 Mobile Platform、Snapdragon 680 4G Mobile Platform、Snapdragon 685 4G Mobile Platform (SM6225-AD)、Snapdragon W5+ Gen 1 Wearable Platform、SW5100、SW5100P、WCD9335、WCD9370、WCD9375、WCD9378、WCD9385、WCD9395、WCN3950、WCN3980、WCN3988、WCN6650、WCN6740、WCN6755、WSA8810、WSA8815、WSA8830、WSA8832、WSA8835 が対象です。\n・公式の対象表：Qualcomm, Inc. / Snapdragon。影響ありとして記載：AR8031。影響ありとして記載：CSRA6620。影響ありとして記載：CSRA6640。影響ありとして記載：FastConnect 7800。影響ありとして記載：QCA2066。影響ありとして記載：QCA6391。影響ありとして記載：QCM6125。影響ありとして記載：QCM8550。影響ありとして記載：QCN9011。影響ありとして記載：QCN9012。影響ありとして記載：QCS6125。影響ありとして記載：QCS8550。影響ありとして記載：SM6475。影響ありとして記載：SM6650。影響ありとして記載：SM6650P。影響ありとして記載：SM7435。影響ありとして記載：SM7635。影響ありとして記載：SM7635P。影響ありとして記載：SW5100。影響ありとして記載：SW5100P。影響ありとして記載：WCD9335。影響ありとして記載：WCD9370。影響ありとして記載：WCD9375。影響ありとして記載：WCD9378。影響ありとして記載：WCD9385。影響ありとして記載：WCD9395。影響ありとして記載：WCN3950。影響ありとして記載：WCN3980。影響ありとして記載：WCN3988。影響ありとして記載：WCN6650。影響ありとして記載：WCN6740。影響ありとして記載：WCN6755。影響ありとして記載：WSA8810。影響ありとして記載：WSA8815。影響ありとして記載：WSA8830。影響ありとして記載：WSA8832。影響ありとして記載：WSA8835。対象の環境：Snapdragon Connectivity、Snapdragon Consumer IOT、Snapdragon Industrial IOT、Snapdragon Mobile、Snapdragon Voice & Music、Snapdragon Wearables\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-27038", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:41.189Z", "lastSuccess": "2026-10-24T04:47:41.189Z", "sourceCheckedAt": "2026-10-24T04:47:41.189Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2021-32030", "aliases": [], "title": "n/a：認証の回避", "summary": "ASUS GT-AC2900 の管理者アプリ（バージョン 3.0.0.4.386.42643 未満）および Lyra Mini（バージョン 3.0.0.4_384_46630 未満）で、認証されていないユーザーからのリモート入力を処理する際に認証バイパスが発生し、管理者インターフェースへ不正にアクセスできる。", "risk": "攻撃者が認証バイパスを利用すると、管理者インターフェースに不正にアクセスできる。", "product": "ASUS Routers", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-32030", "label": "CVE公式レコード" }, { "url": "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "label": "CVE掲載の参考情報" }, { "url": "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "label": "CISAが示す関連情報" }, { "url": "https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32030", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-05-06T14:54:31.000Z", "modifiedAt": "2025-10-21T23:25:47.016Z", "fetchedAt": "2026-10-24T04:47:53.038Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-32030", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "fetchedAt": "2026-10-24T04:47:53.038Z", "publishedAt": "2021-05-06T14:54:31.000Z", "modifiedAt": "2025-10-21T23:25:47.016Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-32030", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2021-32030:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "sourcePath": "retained:/originalText", "text": "ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2021-32030:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:25:47.016Z", "fetchedAt": "2026-10-24T04:47:53.038Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:47:53.038Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "29f6a1720d55057f78d57d99658b7be955f3faa969b0f3cb453cf5b6558754d5", "sourceModifiedAt": "2025-10-21T23:25:47.016Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ASUS GT-AC2900 の管理者アプリ（バージョン 3.0.0.4.386.42643 未満）および Lyra Mini（バージョン 3.0.0.4_384_46630 未満）で、認証されていないユーザーからのリモート入力を処理する際に認証バイパスが発生し、管理者インターフェースへ不正にアクセスできる。", "risk": "攻撃者が認証バイパスを利用すると、管理者インターフェースに不正にアクセスできる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証されていないリモートユーザーである必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E1" ] }, { "text": "デバイスのリモートアクセス機能が WAN から有効になっていることが前提となる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は ASUS GT-AC2900（バージョン 3.0.0.4.386.42643 未満）または Lyra Mini（バージョン 3.0.0.4_384_46630 未満）で、Lyra Mini のすべてのサポート終了（EOL）・サービス終了（EOS）バージョンも含まれる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ASUS Routers」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-32030", "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/", "https://nvd.nist.gov/vuln/detail/CVE-2021-32030" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-32030", "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/", "https://nvd.nist.gov/vuln/detail/CVE-2021-32030" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-32030", "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/", "https://nvd.nist.gov/vuln/detail/CVE-2021-32030" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-32030", "label": "CVE公式レコード" }, { "url": "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "label": "CVE掲載の参考情報" }, { "url": "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/", "label": "CISAが示す関連情報" }, { "url": "https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32030", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "sourceField": "retained:/originalText", "excerpt": "ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/32xxx/CVE-2021-32030.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-32030", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-32030\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-32030（ASUS Routers）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていないリモートユーザーである必要がある。\n・デバイスのリモートアクセス機能が WAN から有効になっていることが前提となる。\n・対象は ASUS GT-AC2900（バージョン 3.0.0.4.386.42643 未満）または Lyra Mini（バージョン 3.0.0.4_384_46630 未満）で、Lyra Mini のすべてのサポート終了（EOL）・サービス終了（EOS）バージョンも含まれる。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-32030", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:47:53.038Z", "lastSuccess": "2026-10-24T04:47:53.038Z", "sourceCheckedAt": "2026-10-24T04:47:53.038Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-39780", "aliases": [], "title": "RT-AX55：コード実行", "summary": "ASUS RT-AX55 のバージョン 3.0.0.4.386.51598 において、認証された攻撃者が /start_apply.htm の qos_bw_rulelist パラメータを通じて OS コマンド注入を実行できる。", "risk": "リモートの認証済み攻撃者が任意の OS コマンドを実行できる可能性がある。", "product": "RT-AX55", "category": "other", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "RT-AX55", "range": "3.0.0.4.386.51598" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-39780", "label": "CVE公式レコード" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55", "label": "CISAが示す関連情報" }, { "url": "https://www.asus.com/content/asus-product-security-advisory/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39780", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-11T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:39.058Z", "fetchedAt": "2026-10-24T04:48:03.176Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unknown", "product": "RT-AX55", "vendor": "ASUS", "versions": [ { "status": "affected", "version": "3.0.0.4.386.51598", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-39780", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "fetchedAt": "2026-10-24T04:48:03.176Z", "publishedAt": "2023-09-11T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:39.058Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "ASUS", "product": "RT-AX55", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "3.0.0.4.386.51598", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.greynoise.io/blog/stealthy-backdoor-campaign-affecting-asus-routers", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-39780", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unknown\",\"product\":\"RT-AX55\",\"vendor\":\"ASUS\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.0.0.4.386.51598\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-39780:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "sourcePath": "retained:/originalText", "text": "ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-39780:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:39.058Z", "fetchedAt": "2026-10-24T04:48:03.176Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "RT-AX55にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:03.176Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2aaa37fba7c37637aae672ed0f0589c46d4793dbe6ca45fdc9bb9cac48422b77", "sourceModifiedAt": "2025-10-21T23:05:39.058Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ASUS RT-AX55 のバージョン 3.0.0.4.386.51598 において、認証された攻撃者が /start_apply.htm の qos_bw_rulelist パラメータを通じて OS コマンド注入を実行できる。", "risk": "リモートの認証済み攻撃者が任意の OS コマンドを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "対象は ASUS RT-AX55 のバージョン 3.0.0.4.386.51598 で、攻撃者は認証済みであり、/start_apply.htm の qos_bw_rulelist パラメータを操作できる環境が必要。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：ASUS / RT-AX55。影響ありとして記載：3.0.0.4.386.51598。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json" ], "evidenceIds": [ "E3" ] }, { "text": "「RT-AX55」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-39780", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55", "https://www.asus.com/content/asus-product-security-advisory/", "https://nvd.nist.gov/vuln/detail/CVE-2023-39780" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-39780", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55", "https://www.asus.com/content/asus-product-security-advisory/", "https://nvd.nist.gov/vuln/detail/CVE-2023-39780" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-39780", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55", "https://www.asus.com/content/asus-product-security-advisory/", "https://nvd.nist.gov/vuln/detail/CVE-2023-39780" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-39780", "label": "CVE公式レコード" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md", "label": "CVE掲載の参考情報" }, { "url": "https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55", "label": "CISAが示す関連情報" }, { "url": "https://www.asus.com/content/asus-product-security-advisory/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39780", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "sourceField": "retained:/originalText", "excerpt": "ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/39xxx/CVE-2023-39780.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unknown\",\"product\":\"RT-AX55\",\"vendor\":\"ASUS\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.0.0.4.386.51598\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-39780", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-39780\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-39780（RT-AX55）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は ASUS RT-AX55 のバージョン 3.0.0.4.386.51598 で、攻撃者は認証済みであり、/start_apply.htm の qos_bw_rulelist パラメータを操作できる環境が必要。\n・公式の対象表：ASUS / RT-AX55。影響ありとして記載：3.0.0.4.386.51598。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-39780", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:03.176Z", "lastSuccess": "2026-10-24T04:48:03.176Z", "sourceCheckedAt": "2026-10-24T04:48:03.176Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-56145", "aliases": [], "title": "cms：コード実行", "summary": "Craft CMS の php.ini で `register_argc_argv` が有効になっている場合、リモートからコードを実行させる脆弱性が存在します。", "risk": "攻撃者がリモートでコードを実行できる可能性があります。", "product": "cms", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "cms", "range": ">= 4.0.0-RC1, < 4.13.2" }, { "product": "cms", "range": ">= 5.0.0-RC1, < 5.5.2" }, { "product": "cms", "range": ">= 3.0.0, < 3.9.14" } ], "fixed": [], "steps": [ "Craft CMS をバージョン 3.9.14、4.13.2、または 5.5.2 に更新するか、`register_argc_argv` を無効化してください。", "「CVE-2024-56145」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-56145", "label": "CVE公式レコード" }, { "url": "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "label": "CISAが示す関連情報" }, { "url": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "label": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56145", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-12-18T20:37:34.301Z", "modifiedAt": "2025-10-21T22:55:33.949Z", "fetchedAt": "2026-10-24T04:48:08.177Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.", "sourceTitle": "RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "craftcms", "product": "cms", "versions": [ { "version": ">= 4.0.0-RC1, < 4.13.2", "status": "affected" }, { "version": ">= 5.0.0-RC1, < 5.5.2", "status": "affected" }, { "version": ">= 3.0.0, < 3.9.14", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-56145", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "fetchedAt": "2026-10-24T04:48:08.177Z", "publishedAt": "2024-12-18T20:37:34.301Z", "modifiedAt": "2025-10-21T22:55:33.949Z", "state": "published", "provider": "GitHub_M", "title": "RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms", "descriptions": [ { "lang": "en", "value": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "craftcms", "product": "cms", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= 4.0.0-RC1, < 4.13.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": ">= 5.0.0-RC1, < 5.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": ">= 3.0.0, < 3.9.14", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "label": "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "label": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/Chocapikk/CVE-2024-56145", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-56145", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"craftcms\",\"product\":\"cms\",\"versions\":[{\"version\":\">= 4.0.0-RC1, < 4.13.2\",\"status\":\"affected\"},{\"version\":\">= 5.0.0-RC1, < 5.5.2\",\"status\":\"affected\"},{\"version\":\">= 3.0.0, < 3.9.14\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"lang\":\"en\",\"description\":\"CWE-94: Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-56145:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "sourcePath": "retained:/originalText", "text": "Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-56145:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:33.949Z", "fetchedAt": "2026-10-24T04:48:08.177Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "cmsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:08.177Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b70ccdb1f7dd991cc10fea30754caa7f2c064472631ff5bf9100e70b3a6ba5ff", "sourceModifiedAt": "2025-10-21T22:55:33.949Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Craft CMS の php.ini で `register_argc_argv` が有効になっている場合、リモートからコードを実行させる脆弱性が存在します。", "risk": "攻撃者がリモートでコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "対象となるのは、php.ini の `register_argc_argv` 設定が有効になっている Craft CMS のバージョンです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは、公式の対象表に記載された範囲（3.0.0 以上 3.9.14 未満、4.0.0‑RC1 以上 4.13.2 未満、5.0.0‑RC1 以上 5.5.2 未満）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：craftcms / cms。影響ありとして記載：>= 4.0.0-RC1, < 4.13.2。影響ありとして記載：>= 5.0.0-RC1, < 5.5.2。影響ありとして記載：>= 3.0.0, < 3.9.14。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E4" ] }, { "text": "「cms」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-56145", "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "https://nvd.nist.gov/vuln/detail/CVE-2024-56145" ] } ], "actions": [ { "text": "Craft CMS をバージョン 3.9.14、4.13.2、または 5.5.2 に更新するか、`register_argc_argv` を無効化してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2024-56145」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-56145", "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "https://nvd.nist.gov/vuln/detail/CVE-2024-56145" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-56145", "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "https://nvd.nist.gov/vuln/detail/CVE-2024-56145" ] } ], "temporaryMitigations": [ { "text": "`register_argc_argv` を無効化して脆弱性を緩和できます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-56145", "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "https://nvd.nist.gov/vuln/detail/CVE-2024-56145" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-56145", "label": "CVE公式レコード" }, { "url": "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9", "label": "CISAが示す関連情報" }, { "url": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3", "label": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56145", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourceField": "/containers/cna/title", "excerpt": "RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "sourceField": "retained:/originalText", "excerpt": "Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56145.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"craftcms\",\"product\":\"cms\",\"versions\":[{\"version\":\">= 4.0.0-RC1, < 4.13.2\",\"status\":\"affected\"},{\"version\":\">= 5.0.0-RC1, < 5.5.2\",\"status\":\"affected\"},{\"version\":\">= 3.0.0, < 3.9.14\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-56145", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-56145\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-56145（cms）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象となるのは、php.ini の `register_argc_argv` 設定が有効になっている Craft CMS のバージョンです。\n・影響を受けるバージョンは、公式の対象表に記載された範囲（3.0.0 以上 3.9.14 未満、4.0.0‑RC1 以上 4.13.2 未満、5.0.0‑RC1 以上 5.5.2 未満）です。\n・公式の対象表：craftcms / cms。影響ありとして記載：>= 4.0.0-RC1, < 4.13.2。影響ありとして記載：>= 5.0.0-RC1, < 5.5.2。影響ありとして記載：>= 3.0.0, < 3.9.14。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-56145", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:08.177Z", "lastSuccess": "2026-10-24T04:48:08.177Z", "sourceCheckedAt": "2026-10-24T04:48:08.177Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-35939", "aliases": [], "title": "CMS：脆弱性情報", "summary": "Craft CMS は、認証されていないユーザーが提供した任意のコンテンツをセッションファイルに保存します。これらのファイルはサーバーの '/var/lib/php/sessions' に 'sess_[session_value]' という名前で作成され、[session_value] は Set‑Cookie ヘッダーでクライアントに渡されます。Craft CMS はクライアントが要求したリターン URL をサニタイズせずに保存するため、認証されていないクライアントは PHP コードなどの任意の値をサーバー上の既知のローカルファイル位置に書き込むことができます。このコンテンツは別の脆弱性と組み合わせてアクセス・実行される可能性があります。Craft CMS バージョン 5.7.5 と 4.15.3 がこの問題に対処するためにリリースされています。", "risk": "任意のコードがサーバー上で実行される可能性があります。", "product": "CMS", "category": "other", "component": "package", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "cisa-cg", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "CMS", "range": "< 5.7.5" }, { "product": "CMS", "range": "< 4.15.3" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35939", "label": "url" }, { "url": "https://github.com/craftcms/cms/pull/17220", "label": "CISAが示す関連情報" }, { "url": "https://github.com/craftcms/cms/releases/tag/4.15.3", "label": "url" }, { "url": "https://github.com/craftcms/cms/releases/tag/5.7.5", "label": "url" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "label": "url" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35939", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-05-07T22:41:29.728Z", "modifiedAt": "2026-02-26T18:28:42.701Z", "fetchedAt": "2026-10-24T04:48:09.055Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.", "sourceTitle": "Craft CMS stores user-provided content in session files", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Craft", "product": "CMS", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "lessThan": "5.7.5", "versionType": "custom" }, { "version": "5.7.5", "status": "unaffected" }, { "version": "0", "status": "affected", "lessThan": "4.15.3", "versionType": "custom" }, { "version": "4.15.3", "status": "unaffected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-35939", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "fetchedAt": "2026-10-24T04:48:09.055Z", "publishedAt": "2025-05-07T22:41:29.728Z", "modifiedAt": "2026-02-26T18:28:42.701Z", "state": "published", "provider": "cisa-cg", "title": "Craft CMS stores user-provided content in session files", "descriptions": [ { "lang": "en", "value": "Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Craft", "product": "CMS", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "5.7.5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "5.7.5", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "4.15.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "4.15.3", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-472", "lang": "en", "description": "CWE-472 External Control of Assumed-Immutable Web Parameter", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "baseScore": 6.9, "baseSeverity": "MEDIUM", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://github.com/craftcms/cms/pull/17220", "label": "url", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/craftcms/cms/releases/tag/4.15.3", "label": "url", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/craftcms/cms/releases/tag/5.7.5", "label": "url", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35939", "label": "url", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/3" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "label": "url", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-35939", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Craft\",\"product\":\"CMS\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.7.5\",\"versionType\":\"custom\"},{\"version\":\"5.7.5\",\"status\":\"unaffected\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"4.15.3\",\"versionType\":\"custom\"},{\"version\":\"4.15.3\",\"status\":\"unaffected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-472 External Control of Assumed-Immutable Web Parameter\",\"lang\":\"en\",\"type\":\"CWE\",\"cweId\":\"CWE-472\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"version\":\"4.0\",\"baseScore\":6.9,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"LOW\",\"subAvailabilityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-35939:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "sourcePath": "retained:/originalText", "text": "Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-35939:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:28:42.701Z", "fetchedAt": "2026-10-24T04:48:09.055Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "CMSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:09.055Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b1efc78d9c5e7b30bf2e9e36691af517b3cbd05d9aba418c69b8b60f8c54e81f", "sourceModifiedAt": "2026-02-26T18:28:42.701Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Craft CMS は、認証されていないユーザーが提供した任意のコンテンツをセッションファイルに保存します。これらのファイルはサーバーの '/var/lib/php/sessions' に 'sess_[session_value]' という名前で作成され、[session_value] は Set‑Cookie ヘッダーでクライアントに渡されます。Craft CMS はクライアントが要求したリターン URL をサニタイズせずに保存するため、認証されていないクライアントは PHP コードなどの任意の値をサーバー上の既知のローカルファイル位置に書き込むことができます。このコンテンツは別の脆弱性と組み合わせてアクセス・実行される可能性があります。Craft CMS バージョン 5.7.5 と 4.15.3 がこの問題に対処するためにリリースされています。", "risk": "任意のコードがサーバー上で実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないクライアントが Craft CMS にリターン URL パラメータを送信でき、Craft CMS がそのパラメータをサニタイズせずにセッションファイルに保存する環境（/var/lib/php/sessions）で発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Craft / CMS。影響ありとして記載：5.7.5未満の版。影響なしとして記載：5.7.5。影響ありとして記載：4.15.3未満の版。影響なしとして記載：4.15.3。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CMS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-35939", "https://github.com/craftcms/cms/pull/17220", "https://github.com/craftcms/cms/releases/tag/4.15.3", "https://github.com/craftcms/cms/releases/tag/5.7.5", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "https://nvd.nist.gov/vuln/detail/CVE-2025-35939" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-35939", "https://github.com/craftcms/cms/pull/17220", "https://github.com/craftcms/cms/releases/tag/4.15.3", "https://github.com/craftcms/cms/releases/tag/5.7.5", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "https://nvd.nist.gov/vuln/detail/CVE-2025-35939" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-35939", "https://github.com/craftcms/cms/pull/17220", "https://github.com/craftcms/cms/releases/tag/4.15.3", "https://github.com/craftcms/cms/releases/tag/5.7.5", "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "https://nvd.nist.gov/vuln/detail/CVE-2025-35939" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-35939", "label": "url" }, { "url": "https://github.com/craftcms/cms/pull/17220", "label": "CISAが示す関連情報" }, { "url": "https://github.com/craftcms/cms/releases/tag/4.15.3", "label": "url" }, { "url": "https://github.com/craftcms/cms/releases/tag/5.7.5", "label": "url" }, { "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json", "label": "url" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35939", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourceField": "/containers/cna/title", "excerpt": "Craft CMS stores user-provided content in session files", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/35xxx/CVE-2025-35939.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Craft\",\"product\":\"CMS\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"5.7.5\",\"versionType\":\"custom\"},{\"version\":\"5.7.5\",\"status\":\"unaffected\"},{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"4.15.3\",\"versionType\":\"custom\"},{\"version\":\"4.15.3\",\"status\":\"unaffected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-35939", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-35939\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-35939（CMS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないクライアントが Craft CMS にリターン URL パラメータを送信でき、Craft CMS がそのパラメータをサニタイズせずにセッションファイルに保存する環境（/var/lib/php/sessions）で発生します。\n・公式の対象表：Craft / CMS。影響ありとして記載：5.7.5未満の版。影響なしとして記載：5.7.5。影響ありとして記載：4.15.3未満の版。影響なしとして記載：4.15.3。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-35939", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:09.055Z", "lastSuccess": "2026-10-24T04:48:09.055Z", "sourceCheckedAt": "2026-10-24T04:48:09.055Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-3935", "aliases": [], "title": "ScreenConnect：コード実行", "summary": "ScreenConnect のバージョン 25.2.3 以前は、ASP.NET Web Forms が使用する ViewState が機械キーで保護されているが、これらの機械キーが取得されると、攻撃者は悪意のある ViewState を送信でき、サーバー上でリモートコード実行が可能になる。", "risk": "機械キーが漏洩した場合、攻撃者は ViewState コードインジェクションを行い、サーバー上で任意のコードを実行できる可能性がある。", "product": "ScreenConnect", "category": "other", "component": "package", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "ConnectWise", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "ScreenConnect", "range": "<25.2.3（環境: Microsoft ASP.NET）" } ], "fixed": [], "steps": [ "クラウド版は特に対応不要。オンプレミス版は最新の安定版へアップグレードし、ScreenConnect 2025.4 パッチを適用して ViewState を無効化し、依存性を除去する。", "「CVE-2025-3935」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "label": "CVE：ConnectWise" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-3935", "label": "CVE公式レコード" }, { "url": "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "label": "CISAが示す関連情報" }, { "url": "https://www.connectwise.com/company/trust/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3935", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-04-25T18:27:44.244Z", "modifiedAt": "2026-02-26T18:28:01.567Z", "fetchedAt": "2026-10-24T04:48:09.838Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. \nIt is important to note that to obtain these machine keys, privileged system level access must be obtained. \n\n\n\nIf these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. \n\n\n\nThe risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it.", "sourceTitle": "ScreenConnect Exposure to ASP.NET ViewState Code Injection", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Microsoft ASP.NET" ], "product": "ScreenConnect", "vendor": "ConnectWise", "versions": [ { "status": "affected", "version": "<25.2.3" } ] } ], "configurationNotes": "対象環境・機能: Microsoft ASP.NET。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-3935", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "fetchedAt": "2026-10-24T04:48:09.838Z", "publishedAt": "2025-04-25T18:27:44.244Z", "modifiedAt": "2026-02-26T18:28:01.567Z", "state": "published", "provider": "ConnectWise", "title": "ScreenConnect Exposure to ASP.NET ViewState Code Injection", "descriptions": [ { "lang": "en", "value": "ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. \nIt is important to note that to obtain these machine keys, privileged system level access must be obtained. \n\n\n\nIf these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. \n\n\n\nThe risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "ConnectWise", "product": "ScreenConnect", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Microsoft ASP.NET" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "<25.2.3", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Cloud: No action is required. \n\nOn-premises: Upgrade to the latest stable version.\n\n\n\n\n\n\n\n\n\n\nDetails and guidance can be found here:\n\n ScreenConnect 25.2.4 Security Patch https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "ConnectWise", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "label": "ConnectWise", "tags": [], "provider": "ConnectWise", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.connectwise.com/company/trust/advisories", "label": "ConnectWise", "tags": [], "provider": "ConnectWise", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-3935", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Microsoft ASP.NET\"],\"product\":\"ScreenConnect\",\"vendor\":\"ConnectWise\",\"versions\":[{\"status\":\"affected\",\"version\":\"<25.2.3\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. \nIt is important to note that to obtain these machine keys, privileged system level access must be obtained. \n\n\n\nIf these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. \n\n\n\nThe risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Cloud: No action is required. \n\nOn-premises: Upgrade to the latest stable version.\n\n\n\n\n\n\n\n\n\n\nDetails and guidance can be found here:\n\n ScreenConnect 25.2.4 Security Patch https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of Untrusted Data\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-3935:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "sourcePath": "retained:/originalText", "text": "ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-3935:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:28:01.567Z", "fetchedAt": "2026-10-24T04:48:09.838Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-06-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "ScreenConnectにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:09.838Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3634ae4430271130d1db83345b78e14f79ba59ce9c58d55d2c91b7aa68daf892", "sourceModifiedAt": "2026-02-26T18:28:01.567Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ScreenConnect のバージョン 25.2.3 以前は、ASP.NET Web Forms が使用する ViewState が機械キーで保護されているが、これらの機械キーが取得されると、攻撃者は悪意のある ViewState を送信でき、サーバー上でリモートコード実行が可能になる。", "risk": "機械キーが漏洩した場合、攻撃者は ViewState コードインジェクションを行い、サーバー上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "攻撃者が特権的なシステムレベルのアクセス権を取得し、ASP.NET の機械キーを入手できることが前提となる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "機械キーが漏洩している状態で、ViewState が有効になっていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：ConnectWise / ScreenConnect。影響ありとして記載：<25.2.3。対象の環境：Microsoft ASP.NET", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E4" ] }, { "text": "「ScreenConnect」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-3935", "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "https://www.connectwise.com/company/trust/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "https://nvd.nist.gov/vuln/detail/CVE-2025-3935" ] } ], "actions": [ { "text": "クラウド版は特に対応不要。オンプレミス版は最新の安定版へアップグレードし、ScreenConnect 2025.4 パッチを適用して ViewState を無効化し、依存性を除去する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E5", "E1" ] }, { "text": "「CVE-2025-3935」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-3935", "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "https://www.connectwise.com/company/trust/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "https://nvd.nist.gov/vuln/detail/CVE-2025-3935" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-3935", "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "https://www.connectwise.com/company/trust/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "https://nvd.nist.gov/vuln/detail/CVE-2025-3935" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-3935", "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "https://www.connectwise.com/company/trust/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "https://nvd.nist.gov/vuln/detail/CVE-2025-3935" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-3935", "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "https://www.connectwise.com/company/trust/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "https://nvd.nist.gov/vuln/detail/CVE-2025-3935" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "label": "CVE：ConnectWise" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-3935", "label": "CVE公式レコード" }, { "url": "https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "label": "CISAが示す関連情報" }, { "url": "https://www.connectwise.com/company/trust/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3935", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. \nIt is important to note that to obtain these machine keys, privileged system level access must be obtained. \n\n\n\nIf these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. \n\n\n\nThe risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourceField": "/containers/cna/title", "excerpt": "ScreenConnect Exposure to ASP.NET ViewState Code Injection", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "sourceField": "retained:/originalText", "excerpt": "ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Microsoft ASP.NET\"],\"product\":\"ScreenConnect\",\"vendor\":\"ConnectWise\",\"versions\":[{\"status\":\"affected\",\"version\":\"<25.2.3\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3935.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Cloud: No action is required. \n\nOn-premises: Upgrade to the latest stable version.\n\n\n\n\n\n\n\n\n\n\nDetails and guidance can be found here:\n\n ScreenConnect 25.2.4 Security Patch https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3935", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-3935\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-3935（ScreenConnect）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が特権的なシステムレベルのアクセス権を取得し、ASP.NET の機械キーを入手できることが前提となる。\n・機械キーが漏洩している状態で、ViewState が有効になっていること。\n・公式の対象表：ConnectWise / ScreenConnect。影響ありとして記載：<25.2.3。対象の環境：Microsoft ASP.NET\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-3935", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:09.838Z", "lastSuccess": "2026-10-24T04:48:09.838Z", "sourceCheckedAt": "2026-10-24T04:48:09.838Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-4632", "aliases": [], "title": "MagicINFO 9 Server：脆弱性情報", "summary": "Samsung MagicINFO 9 Server のバージョン 21.1052 未満に、パス名を制限ディレクトリに正しく限定できない脆弱性があり、攻撃者がシステム権限で任意のファイルを書き込むことが可能です。", "risk": "攻撃者がシステム権限で任意のファイルを書き込めるため、サーバー上で不正なプログラムや設定を配置される危険があります。", "product": "MagicINFO 9 Server", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "samsung.tv_appliance", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "MagicINFO 9 Server", "range": "< 21.1052" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "label": "CVE：samsung.tv_appliance" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4632", "label": "CVE公式レコード" }, { "url": "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4632", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-05-13T05:19:19.254Z", "modifiedAt": "2026-02-26T18:28:36.767Z", "fetchedAt": "2026-10-24T04:48:16.254Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "MagicINFO 9 Server", "vendor": "Samsung Electronics", "versions": [ { "lessThan": "21.1052", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-4632", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "fetchedAt": "2026-10-24T04:48:16.254Z", "publishedAt": "2025-05-13T05:19:19.254Z", "modifiedAt": "2026-02-26T18:28:36.767Z", "state": "published", "provider": "samsung.tv_appliance", "title": "", "descriptions": [ { "lang": "en", "value": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Samsung Electronics", "product": "MagicINFO 9 Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "21.1052", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "samsung.tv_appliance", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "label": "samsung.tv_appliance", "tags": [], "provider": "samsung.tv_appliance", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4632", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"MagicINFO 9 Server\",\"vendor\":\"Samsung Electronics\",\"versions\":[{\"lessThan\":\"21.1052\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-4632:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "sourcePath": "retained:/originalText", "text": "Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-4632:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "modifiedAt": "2025-05-22T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:28:36.767Z", "fetchedAt": "2026-10-24T04:48:16.254Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-05-22T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "MagicINFO 9 Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:16.254Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0b82689bda4298406e385e4d2f83d6361f8892916120b56baee0ac5a5f1d8784", "sourceModifiedAt": "2026-02-26T18:28:36.767Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Samsung MagicINFO 9 Server のバージョン 21.1052 未満に、パス名を制限ディレクトリに正しく限定できない脆弱性があり、攻撃者がシステム権限で任意のファイルを書き込むことが可能です。", "risk": "攻撃者がシステム権限で任意のファイルを書き込めるため、サーバー上で不正なプログラムや設定を配置される危険があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "公式の対象表：Samsung Electronics / MagicINFO 9 Server。影響ありとして記載：21.1052未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json" ], "evidenceIds": [ "E3" ] }, { "text": "「MagicINFO 9 Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-4632", "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "https://nvd.nist.gov/vuln/detail/CVE-2025-4632" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-4632", "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "https://nvd.nist.gov/vuln/detail/CVE-2025-4632" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-4632", "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "https://nvd.nist.gov/vuln/detail/CVE-2025-4632" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "label": "CVE：samsung.tv_appliance" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4632", "label": "CVE公式レコード" }, { "url": "https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4632", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "sourceField": "retained:/originalText", "excerpt": "Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4632.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"MagicINFO 9 Server\",\"vendor\":\"Samsung Electronics\",\"versions\":[{\"lessThan\":\"21.1052\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4632", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-4632\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-4632（MagicINFO 9 Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Samsung Electronics / MagicINFO 9 Server。影響ありとして記載：21.1052未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-4632", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:16.254Z", "lastSuccess": "2026-10-24T04:48:16.254Z", "sourceCheckedAt": "2026-10-24T04:48:16.254Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-38950", "aliases": [], "title": "n/a：ファイルへの不正アクセス", "summary": "ZKTeco BioTime の iclock API にパストラバーサル脆弱性があり、バージョン 8.5.5 の製品で認証されていない攻撃者が細工したペイロードを送ることで任意のファイルを読み取ることができます。この脆弱性は ZKBioTime のバージョン 9.0.120240617.19506 で修正されました。", "risk": "攻撃者が任意のファイルを取得できるため、機密情報が漏洩する可能性があります。", "product": "ZKTeco BioTime", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "この脆弱性は ZKBioTime のバージョン 9.0.120240617.19506 で修正されました。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-38950", "label": "CVE公式レコード" }, { "url": "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "label": "CVE掲載の参考情報" }, { "url": "https://www.zkteco.com/en/Security_Bulletinsibs", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38950", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-08-03T00:00:00.000Z", "modifiedAt": "2026-07-09T00:27:18.522Z", "fetchedAt": "2026-10-24T04:48:17.324Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-38950", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "fetchedAt": "2026-10-24T04:48:17.324Z", "publishedAt": "2023-08-03T00:00:00.000Z", "modifiedAt": "2026-07-09T00:27:18.522Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://sploitus.com/exploit?id=PACKETSTORM:177859", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.fortinet.com/content/dam/fortinet/assets/reports/report-incident-response-middle-east.pdf", "label": "CISA-ADP", "tags": [ "media-coverage" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38950", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-38950:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "sourcePath": "retained:/originalText", "text": "ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-38950:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-07-09T00:27:18.522Z", "fetchedAt": "2026-10-24T04:48:17.324Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "許可していない場所のファイルにアクセスされる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:17.324Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "fb2b4060a58838cf3e07342403c77c1bb36e3b77771f3316f6ece475850a0647", "sourceModifiedAt": "2026-07-09T00:27:18.522Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ZKTeco BioTime の iclock API にパストラバーサル脆弱性があり、バージョン 8.5.5 の製品で認証されていない攻撃者が細工したペイロードを送ることで任意のファイルを読み取ることができます。この脆弱性は ZKBioTime のバージョン 9.0.120240617.19506 で修正されました。", "risk": "攻撃者が任意のファイルを取得できるため、機密情報が漏洩する可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "認証されていない攻撃者が iclock API に細工したペイロードを送信できる環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ZKTeco BioTime」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-38950", "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "https://www.zkteco.com/en/Security_Bulletinsibs", "https://nvd.nist.gov/vuln/detail/CVE-2023-38950" ] } ], "actions": [ { "text": "この脆弱性は ZKBioTime のバージョン 9.0.120240617.19506 で修正されました。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-38950", "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "https://www.zkteco.com/en/Security_Bulletinsibs", "https://nvd.nist.gov/vuln/detail/CVE-2023-38950" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-38950", "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "https://www.zkteco.com/en/Security_Bulletinsibs", "https://nvd.nist.gov/vuln/detail/CVE-2023-38950" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-38950", "label": "CVE公式レコード" }, { "url": "https://claroty.com/team82/disclosure-dashboard/cve-2023-38950", "label": "CVE掲載の参考情報" }, { "url": "https://www.zkteco.com/en/Security_Bulletinsibs", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38950", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "sourceField": "retained:/originalText", "excerpt": "ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/38xxx/CVE-2023-38950.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-38950", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-38950\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-38950（ZKTeco BioTime）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていない攻撃者が iclock API に細工したペイロードを送信できる環境。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-38950", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:17.324Z", "lastSuccess": "2026-10-24T04:48:17.324Z", "sourceCheckedAt": "2026-10-24T04:48:17.324Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-11182", "aliases": [], "title": "Email Server：ブラウザー上での不正な処理", "summary": "MDaemon Email Server に保存型 XSS の脆弱性があり、バージョン 24.5.1c 未満（ただし、構造化データでは 24.5.0 までが影響あり、24.5.1 が影響なしと記載）です。", "risk": "リモートの攻撃者が HTML メールに JavaScript を埋め込んだ img タグを送信すると、受信者の Webmail ブラウザーで任意の JavaScript が実行される可能性があります。", "product": "Email Server", "category": "other", "component": "package", "severity": "medium", "cvss": 5.3, "cvssVersion": "4.0", "cvssSource": "ESET", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N", "affected": [ { "product": "Email Server", "range": "<= 24.5.0（環境: Windows）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "label": "CVE：ESET" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-11182", "label": "CVE公式レコード" }, { "url": "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "label": "CISAが示す関連情報" }, { "url": "https://mdaemon.com/pages/downloads-critical-updates", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11182", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-11-15T10:43:10.960Z", "modifiedAt": "2025-10-21T22:55:36.394Z", "fetchedAt": "2026-10-24T04:48:20.312Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.", "sourceTitle": "Stored XSS vulnerability in MDaemon Email Server", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Windows" ], "product": "Email Server", "vendor": "MDaemon", "versions": [ { "lessThanOrEqual": "24.5.0", "status": "affected", "version": "0", "versionType": "semver" }, { "status": "unaffected", "version": "24.5.1", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: Windows。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-11182", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "fetchedAt": "2026-10-24T04:48:20.312Z", "publishedAt": "2024-11-15T10:43:10.960Z", "modifiedAt": "2025-10-21T22:55:36.394Z", "state": "published", "provider": "ESET", "title": "Stored XSS vulnerability in MDaemon Email Server", "descriptions": [ { "lang": "en", "value": "An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "MDaemon", "product": "Email Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Windows" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "24.5.0", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "24.5.1", "versionType": "semver", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "Actively used in the wild.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "ESET", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "label": "ESET", "tags": [], "provider": "ESET", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11182", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"product\":\"Email Server\",\"vendor\":\"MDaemon\",\"versions\":[{\"lessThanOrEqual\":\"24.5.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"status\":\"unaffected\",\"version\":\"24.5.1\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Actively used in the wild.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"userInteraction\":\"PASSIVE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-11182:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "sourcePath": "retained:/originalText", "text": "MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-11182:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:36.394Z", "fetchedAt": "2026-10-24T04:48:20.312Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Email Serverにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:48:20.312Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c784c9cbf7e1da156471c88f2e19e56dbf110ef55d69e07006a19f8e2e0ff9c7", "sourceModifiedAt": "2025-10-21T22:55:36.394Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "MDaemon Email Server に保存型 XSS の脆弱性があり、バージョン 24.5.1c 未満（ただし、構造化データでは 24.5.0 までが影響あり、24.5.1 が影響なしと記載）です。", "risk": "リモートの攻撃者が HTML メールに JavaScript を埋め込んだ img タグを送信すると、受信者の Webmail ブラウザーで任意の JavaScript が実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1", "E4" ], "applicability": [ { "text": "攻撃者が HTML 形式のメールを作成し、img タグ内に JavaScript を含めて送信でき、かつ被害者がそのメールを MDaemon の Webmail で閲覧すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "公式の対象表：MDaemon / Email Server。影響ありとして記載：24.5.0以下の版。影響なしとして記載：24.5.1。対象の環境：Windows", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Email Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-11182", "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "https://mdaemon.com/pages/downloads-critical-updates", "https://nvd.nist.gov/vuln/detail/CVE-2024-11182" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-11182", "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "https://mdaemon.com/pages/downloads-critical-updates", "https://nvd.nist.gov/vuln/detail/CVE-2024-11182" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-11182", "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "https://mdaemon.com/pages/downloads-critical-updates", "https://nvd.nist.gov/vuln/detail/CVE-2024-11182" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "label": "CVE：ESET" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-11182", "label": "CVE公式レコード" }, { "url": "https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "label": "CISAが示す関連情報" }, { "url": "https://mdaemon.com/pages/downloads-critical-updates", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11182", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"product\":\"Email Server\",\"vendor\":\"MDaemon\",\"versions\":[{\"lessThanOrEqual\":\"24.5.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"status\":\"unaffected\",\"version\":\"24.5.1\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11182.json", "sourceField": "/containers/cna/title", "excerpt": "Stored XSS vulnerability in MDaemon Email Server", "language": null }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "sourceField": "retained:/originalText", "excerpt": "MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.", "language": "en", "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-11182", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-11182\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-11182（Email Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が HTML 形式のメールを作成し、img タグ内に JavaScript を含めて送信でき、かつ被害者がそのメールを MDaemon の Webmail で閲覧すること。\n・公式の対象表：MDaemon / Email Server。影響ありとして記載：24.5.0以下の版。影響なしとして記載：24.5.1。対象の環境：Windows\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-11182", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:48:20.312Z", "lastSuccess": "2026-10-24T04:48:20.312Z", "sourceCheckedAt": "2026-10-24T04:48:20.312Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-27443", "aliases": [], "title": "n/a：ブラウザー上での不正な処理", "summary": "Zimbra Collaboration (ZCS) 9.0 と 10.0 の Web メールのクラシック UI にある CalendarInvite 機能で、カレンダーのヘッダー処理に入力検証が不十分なため、クロスサイトスクリプティング (XSS) の脆弱性が存在します。攻撃者は細工したカレンダーヘッダーを含むメールを送信でき、被害者がそのメールをクラシック UI で閲覧すると、埋め込まれたスクリプトが被害者のセッション上で実行されます。", "risk": "被害者のブラウザー上で任意の JavaScript コードが実行される可能性があります。", "product": "Synacor Zimbra Collaboration Suite (ZCS)", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-27443", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27443", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-08-12T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:48.688Z", "fetchedAt": "2026-10-24T06:04:11.476Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-27443", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "fetchedAt": "2026-10-24T06:04:11.476Z", "publishedAt": "2024-08-12T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:48.688Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.welivesecurity.com/en/eset-research/operation-roundpress/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27443", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":6.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-27443:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "sourcePath": "retained:/originalText", "text": "Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-27443:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:48.688Z", "fetchedAt": "2026-10-24T06:04:11.476Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-05-19T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:04:11.476Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "af266b3aeecd3e0dfd4d55f3bcc4c44f05384783767608a325eb74f9a4a3a244", "sourceModifiedAt": "2025-10-21T22:55:48.688Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zimbra Collaboration (ZCS) 9.0 と 10.0 の Web メールのクラシック UI にある CalendarInvite 機能で、カレンダーのヘッダー処理に入力検証が不十分なため、クロスサイトスクリプティング (XSS) の脆弱性が存在します。攻撃者は細工したカレンダーヘッダーを含むメールを送信でき、被害者がそのメールをクラシック UI で閲覧すると、埋め込まれたスクリプトが被害者のセッション上で実行されます。", "risk": "被害者のブラウザー上で任意の JavaScript コードが実行される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者が細工したカレンダーヘッダーを含むメールを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E1" ] }, { "text": "被害者が Zimbra Web メールのクラシックインターフェースでそのメールを閲覧すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E1" ] }, { "text": "CalendarInvite 機能が有効で、カレンダーのヘッダーが表示される環境であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Synacor Zimbra Collaboration Suite (ZCS)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://nvd.nist.gov/vuln/detail/CVE-2024-27443" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://nvd.nist.gov/vuln/detail/CVE-2024-27443" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://nvd.nist.gov/vuln/detail/CVE-2024-27443" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-27443", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27443", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim's session, potentially leading to execution of arbitrary JavaScript code.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/27xxx/CVE-2024-27443.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27443", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-27443\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-27443（Synacor Zimbra Collaboration Suite (ZCS)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が細工したカレンダーヘッダーを含むメールを送信できること。\n・被害者が Zimbra Web メールのクラシックインターフェースでそのメールを閲覧すること。\n・CalendarInvite 機能が有効で、カレンダーのヘッダーが表示される環境であること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-27443", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:04:11.476Z", "lastSuccess": "2026-10-24T06:04:11.476Z", "sourceCheckedAt": "2026-10-24T06:04:11.476Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } } ], "total": 2239, "limit": 20, "offset": 840, "filters": { "product": "all", "type": "all", "q": "", "page": 43 }, "pagination": { "page": 43, "pageSize": 20, "totalPages": 112 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-24T10:17:49.804Z", "lastAttempt": "2026-10-24T10:17:49.804Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-24T10:17:49.804Z", "lastAttempt": "2026-10-24T10:17:49.804Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-24T10:17:49.804Z", "lastAttempt": "2026-10-24T10:17:49.804Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-24T10:17:49.804Z", "lastAttempt": "2026-10-24T10:17:49.804Z", "error": null, "recordCount": 1, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T09:02:49.865Z 〜 2026-10-24T10:17:49.804Z、全製品の変更 5/5件まで確認、対象1件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-24T10:17:49.804Z", "lastAttempt": "2026-10-24T10:17:49.804Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }