CVE-2025-7884
BaseFortify
Publication date: 2025-07-20
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| eluktronics | control_center | 5.23.51.41 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-345 | The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Eluktronics Control Center 5.23.51.41 involves the REG File Handler component executing .reg (Windows Registry) files with elevated privileges during installation without verifying their integrity or authenticity. Because these .reg files can be modified before execution, an attacker with local access can tamper with them to introduce unauthorized registry entries. This leads to insufficient verification of data authenticity and unsafe registry execution, potentially causing privilege escalation or persistent system compromise. [1, 2]
How can this vulnerability impact me? :
The vulnerability allows an attacker with local access to manipulate registry files executed by the installer, potentially leading to unauthorized changes in the system registry. This can result in privilege escalation or persistent compromise of the affected system, undermining system integrity and security. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves the execution of modifiable .reg files with elevated privileges during installation of Eluktronics Control Center 5.23.51.41. Detection would involve monitoring for unauthorized or unexpected modifications to .reg files related to this software, and checking for unusual registry changes or installation activities. Specific commands are not provided in the resources, but general approaches include using Windows tools like 'reg query' to inspect registry keys, and file integrity monitoring tools to detect changes to .reg files. Since the attack requires local access and involves registry manipulation, monitoring local system logs and file changes related to the Eluktronics Control Center installation directory may help detect exploitation attempts. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting local user permissions to prevent unauthorized modification of .reg files used by Eluktronics Control Center during installation. Since no official vendor patch or countermeasures are available, consider replacing the affected product with an alternative. Additionally, monitor and audit registry changes and installation processes to detect suspicious activity. Avoid running the installer with elevated privileges unless necessary and ensure that only trusted users have access to modify installation files. [2, 1]