CVE-2025-24845

5.5 mediumEPSS 0.2%

Medium (5.5) in hummingheads defense platform. EPSS 0.2% chance of exploitation in the next 30 days.

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-88
Published: 2025-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hummingheads:defense_platform

References

https://jvn.jp/en/jp/JVN66673020/
https://www.hummingheads.co.jp/dep/storelist/

Check your stack JSON