MEDIUM🇵🇱 Wersja polska

CVE-2025-24845

CVSS 5.5v3.1pub. 2025-02-06upd. 2026-01-30

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Hummingheads Defense Platform

    APP
    Hummingheads
    ≤ 3.9.51.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-20094HIGH8.8ten sam produkt

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x a...

CVE-2025-22890HIGH8.8ten sam produkt

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. ...

CVE-2025-22894HIGH8.8ten sam produkt

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x a...

CVE-2025-23236HIGH8.8ten sam produkt

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker...

CVE-2025-24483MEDIUM5.5ten sam produkt

NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an...