Threats tagged 'ghsa-hfpp-2q66-88fj'

CVE-2025-12915 is a file inclusion vulnerability in the Init Script Handler component of 70mai X200 devices up to version 20251019. The vulnerability requires local access and has a high attack complexity, making exploitation difficult. The vulnerability allows an attacker with high privileges to include files, potentially leading to full compromise. The vendor was contacted but did not respond, and no patch or remediation is currently available. Public exploit code exists for this vulnerability.