CNNVD-202507-2719 Information

CNNVD ID

CNNVD-202507-2719

CVE-2025-7231

  • CNNVD Published: 2025-07-21

Description (Chinese)

INVT VT-Designer是中国英威腾(INVT)公司的一个HMI编程与配置软件。 INVT VT-Designer存在缓冲区错误漏洞,该漏洞源于解析PM3文件时存在越界写入,可能导致远程代码执行。

Description (English)

INVT VT-Designer is a HMI programming and configuration software for the company Intensium (INVT) in China. INVT VT-Designer has an error loophole in the buffer zone, which stems from the cross-border writing of PM3 documents when they are deciphered and may lead to remote code execution.

Hazard Level

Medium

Vulnerability Type

缓冲区错误

Affected Vendor

英威腾

Published

2025-07-21

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-482/

Patch

https://www.invt.com/software-download

Share on: