PT-2025-28550
CVE-2025-48819
·
Published
2025-07-08
·
Updated
2025-07-08
Description by
CVSS 3.1
7.1
HighMetricsAV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Windows Universal Plug and Play (UPnP) Device Host (affected versions not specified)
Description:
The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges over an adjacent network. This affects the Windows Universal Plug and Play (UPnP) Device Host.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾