BaseFortify

Publication date: 2025-11-08

Last updated on: 2026-04-29

Assigner: VulDB

Description

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-08

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-11-09

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12915

Affected Vendors & Products

Vendor	Product	Version / Range
70mai	x200_firmware	to 2025-10-19 (inc)
70mai	x200	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the 70mai X200 device up to version 20251019, specifically in the Init Script Handler component. It allows an attacker with local access to manipulate the system in a way that results in file inclusion, potentially enabling unauthorized access or execution of files. The attack is complex and difficult to exploit, but a public exploit is available.

Impact Analysis

If exploited, this vulnerability can lead to unauthorized file inclusion, which may compromise the confidentiality, integrity, and availability of the affected system. This could allow an attacker with local access to execute malicious code or access sensitive information, potentially disrupting normal operations or causing data breaches.

Hi! I’m here to help you understand CVE-2025-12915. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70