CNNVD-202508-1652 Information

CNNVD ID

CNNVD-202508-1652

CVE-2025-27846

  • CNNVD Published: 2025-08-14

Description (Chinese)

ESPEC North America Web Controller 3是美国ESPEC North America公司的一个实验室设备监控软件。 ESPEC North America Web Controller 3 3.3.8之前版本存在安全漏洞,该漏洞源于GRUB和BIOS未受保护,物理访问可能导致权限提升。

Description (English)

ESPEC North America Web Contractor 3 is a laboratory equipment control software for the United States company ESPEC North America. The previous version of ESPEC North American Web Contractor 3.3.8 had a security loophole, which stemmed from the unprotected nature of GRUB and BIOS, and physical access could lead to increased access.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

ESPEC North America

Published

2025-08-14

Last Modified

2026-02-24

References

https://espec.com/na/about/detail/cve_2025_27846 https://nvd.nist.gov/vuln/detail/CVE-2025-27846

Patch

https://espec.com/na/about/detail/cve_2025_27845

Share on: