BaseFortify

Publication date: 2025-09-30

Last updated on: 2025-10-02

Assigner: Hitachi Energy

Description

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while resolving application performance related issues.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-09-30

Last Modified

2025-10-02

Generated

2026-07-06

AI Q&A

2025-09-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10217

Affected Vendors & Products

Vendor	Product	Version / Range
hitachienergy	asset_suite	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-117	The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Asset Suite and allows an authenticated user to manipulate performance-related log data or inject crafted data into log files. This can potentially be used to carry out further malicious attacks. Performance logging is usually enabled for troubleshooting application performance issues.

Impact Analysis

The vulnerability can impact you by allowing an authenticated user to alter or inject false information into performance logs, which may hinder troubleshooting efforts, obscure malicious activity, or facilitate further attacks by misleading administrators or automated systems relying on log data.

Hi! I’m here to help you understand CVE-2025-10217. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70