CVE-2025-1421

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

Metrics

CVSS 4.0 2.4/10

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-1236

Affected software

No affected versions have been published.

Timeline

Published: May 21, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-142109.8A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the f CVE-2025-142119.8A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functiona CVE-2025-142129.8A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the f CVE-2025-142138.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to th CVE-2025-142148.8A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. CVE-2025-142159.8A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The CVE-2025-142169.8A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewse CVE-2025-142179.8A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Suc CVE-2025-142189.8A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /CVE-2025-142197.2A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file CVE-2025-142204.3A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipu CVE-2025-142215.4A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The mani