CVE-2025-45619

MediumCVSS 6.5

Published: 30/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.73%

50th percentile - higher than 50% of all known CVEs

Summary

A vulnerability in Aver PTC310UV2 firmware version 0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function.

Risk Assessment

An attacker can take control of the device, leading to compromise of confidentiality, integrity, and availability of the system.

Recommendation

Immediately update the firmware to the latest version available from the vendor and restrict access to the SendAction function to trusted networks only.

Original NVD description (English source)

An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function