Vulnerabilidades de Mechrevo
CVEs publicadas que afetam produtos de Mechrevo: 2 registro(s), com severidade, exploração e correções.
CVE-2025-9016
Alta · 7.0
CWE-426 15/08/2025
Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path
A vulnerability has been found in Mechrevo Control Center GX V2 5.56.51.48. Affected is an unknown function of the file C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVE-2025-9000
Alta · 7.0
CWE-426 14/08/2025
Mechrevo Control Center GX V2 reg File uncontrolled search path
A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.