CVE-2025-53508CWE-78

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability

High · published August 29, 2025

CVSS v4.0
8.6
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01260 · 69.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-08-29T04:14Z
EPSS history
Timeline
  • 29 AUG 04:14Z
    Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability
    cvelistv5