BaseFortify

Publication date: 2025-12-17

Last updated on: 2025-12-18

Assigner: Johnson Controls

Description

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-17

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43873

EUVD

EUVD-2025-203904

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to successfully exploit certain weaknesses to modify the firmware of a device and gain full access to it.

Impact Analysis

If exploited, this vulnerability can lead to an attacker gaining full control over the affected device by modifying its firmware, potentially compromising the device's integrity, confidentiality, and availability.

Hi! I’m here to help you understand CVE-2025-43873. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70