CVE-2025-4540CWE-426CWE-428

MTSoftware C-Lodop CLodopPrintService unquoted search path

High · published May 11, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 6.6.13 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00339 · 26.1th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-428 · Unquoted Search Path or Element
Published
2025-05-11T15:31Z
EPSS history
Timeline
  • 11 MAY 15:31Z
    MTSoftware C-Lodop CLodopPrintService unquoted search path
    cvelistv5