PT-2025-28257 · Invt · Invt Hmitool

CVE-2025-7223

Publicado

2024-08-15

Atualizado

2025-07-29

CVSS v3.1

7.8

Alta

Vetor

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: INVT HMITool (affected versions not specified)

Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write in VPM file parsing.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

BDU:2025-09352

CVE-2025-7223

ZDI-25-474

Invt Hmitool