CVE-2025-4043CWE-1274

Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

Medium · published May 7, 2025

CVSS v4.0
6.1
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.

The record
Technical detail
CVSS v4.0
6.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-1274 · Improper Access Control for Volatile Memory Containing Boot Code
Published
2025-05-07T20:25Z
EPSS history
Timeline
  • 07 MAY 20:25Z
    Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
    cvelistv5