{"id":"CVE-2025-24845","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-24845","generatedAt":"2026-10-28T13:13:07.463Z","title":"Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier.","description":"Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.","published":"2025-02-06T08:15:31.000Z","lastModified":"2026-06-17T08:59:42.000Z","status":"Analyzed","sourceIdentifier":"vultures@jpcert.or.jp","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},"cwe":["CWE-88"],"affected":["hummingheads/defense platform"],"epss":{"score":0.00192,"percentile":0.08786,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://jvn.jp/en/jp/JVN66673020/","tags":["Third Party Advisory"],"source":"vultures@jpcert.or.jp"},{"url":"https://www.hummingheads.co.jp/dep/storelist/","tags":["Product"],"source":"vultures@jpcert.or.jp"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-24845","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}