PT-2025-37723

CVE-2025-10203

Published

2025-09-15

Updated

2025-09-20

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Digilent WaveForms versions prior to 3.24.4

Description A relative path traversal vulnerability exists due to improper input validation in Digilent WaveForms, potentially leading to arbitrary code execution. Successful exploitation requires an attacker to trick a user into opening a specially crafted .DWF3WORK file.

Recommendations Update Digilent WaveForms to version 3.24.4 or later.

Exploitability

Fix

Impacts

Researchers

Kimiya

Vendors

Affected products

Weakness enumeration

CWE-23: Relative Path Traversal

Related identifiers

CVE-2025-10203