VulnerabilityDeferred

CVE-2025-54958

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability.

MEDIUM 5.3EPSS 0.83%

Does this matter?

Lower severity and a low EPSS score (0.83%). Track it; it rarely justifies an emergency change on its own.

Description

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product.

CVSS 4.0: 5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.83% probability · 55th percentile
CISA KEV: Not listed
Weakness: CWE-78
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN39636188/
https://www.mubit.co.jp/sub/products/blue/pb-base-cloud-890.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.