CVE-2025-7639
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
The vulnerability allows an authenticated user with "DNA Authority - Operator" privilege to tamper with serialized data, potentially leading to code execution during deserialization under the privileges of the "DNA Apps" security group.
Risk Assessment
Risk of system takeover by a privileged user, potentially resulting in unauthorized access to critical infrastructure.
Recommendation
Restrict operator privileges and implement validation of serialized data before deserialization.
Original NVD description (English source)
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps".