ByteOS Network

Vulnerability Details :

CVE-2025-45737

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-27 Jun, 2025 | 00:00

Updated At-27 Jun, 2025 | 19:51

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:27 Jun, 2025 | 00:00

Updated At:27 Jun, 2025 | 19:51

▼CVE Numbering Authority (CNA)

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/za233/NeacController	N/A

Hyperlink: https://github.com/za233/NeacController

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-269	CWE-269 Improper Privilege Management

Type: CWE

CWE ID: CWE-269

Description: CWE-269 Improper Privilege Management

Metrics

Version	Base score	Base severity	Vector
3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:27 Jun, 2025 | 05:15

Updated At:30 Jun, 2025 | 18:38

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses

CWE ID	Type	Source
CWE-269	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-269

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://github.com/za233/NeacController	cve@mitre.org	N/A

Hyperlink: https://github.com/za233/NeacController

Source: cve@mitre.org

Resource: N/A

Similar CVEs

3Records found

CVE-2025-46576

Matching Score-4

Assigner-ZTE Corporation

View Details

Matching Score-4

Assigner-ZTE Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.08% / 23.42%

7 Day CHG+0.02%

Published-27 Apr, 2025 | 01:16

Updated-12 May, 2025 | 19:32

ZTE GoldenDB Database product has a privilege escalation vulnerability

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content.

Vendor-ZTE Corporation

Product-zxcloud_goldendb GoldenDB

CWE ID-CWE-269

Improper Privilege Management

CVE-2022-26668

Matching Score-4

Assigner-TWCERT/CC

View Details

Matching Score-4

Assigner-TWCERT/CC

CVSS Score-7.3||HIGH

EPSS-0.65% / 69.94%

7 Day CHG~0.00%

Published-20 Jun, 2022 | 05:30

Updated-17 Sep, 2024 | 02:42

ASUS Control Center - Broken Access Control

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service.

Vendor-ASUS (ASUSTeK Computer Inc.)

Product-control_center Control Center

CWE ID-CWE-269

Improper Privilege Management

CWE ID-CWE-863

Incorrect Authorization

CVE-2017-20021

Matching Score-4

Assigner-VulDB

View Details

Matching Score-4

Assigner-VulDB

CVSS Score-6.5||MEDIUM

EPSS-0.36% / 57.25%

7 Day CHG~0.00%

Published-09 Jun, 2022 | 22:35

Updated-15 Apr, 2025 | 14:29

Solare Solar-Log File Upload privileges management

A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

Vendor-solar-log Solare

Product-solar-log_1000_firmware solar-log_500 solar-log_2000 solar-log_500_firmware solar-log_300 solar-log_300_firmware solar-log_250 solar-log_250_firmware solar-log_2000_firmware solar-log_1000_pm\+solar-log_1200_firmware solar-log_1000 solar-log_1000_pm\+_firmware solar-log_800e_firmware solar-log_800e solar-log_1200 Solar-Log

CWE ID-CWE-269

Improper Privilege Management

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

CVE-2025-45737

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs