CVE-2025-58079
BaseFortify
Publication date: 2025-10-16
Last updated on: 2025-10-16
Assigner: JPCERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| neojapan | desknet's_neo | 9.0r2.0 |
| neojapan | desknet's_neo | 4.0r1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-424 | The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Protection of Alternate Path (CWE-424) in the AppSuite component of desknet's NEO versions V4.0R1.0 to V9.0R2.0. It allows an attacker to create malicious AppSuite applications by exploiting insufficient protection of alternate paths within the software.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can create malicious applications within the AppSuite, potentially leading to unauthorized actions or disruptions. The CVSS v3.0 score indicates low to medium impact with no confidentiality or availability impact but some integrity impact, meaning the attacker could alter data or behavior without causing denial of service or data disclosure.