CVE-2025-12915
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-08

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-08
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2025-11-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-12915
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
70mai x200_firmware to 2025-10-19 (inc)
70mai x200 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the 70mai X200 device up to version 20251019, specifically in the Init Script Handler component. It allows an attacker with local access to manipulate the system in a way that results in file inclusion, potentially enabling unauthorized access or execution of files. The attack is complex and difficult to exploit, but a public exploit is available.

Impact Analysis

If exploited, this vulnerability can lead to unauthorized file inclusion, which may compromise the confidentiality, integrity, and availability of the affected system. This could allow an attacker with local access to execute malicious code or access sensitive information, potentially disrupting normal operations or causing data breaches.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-12915. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart