CVE-2025-1700

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during installation of the software.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
Motorola	Software Fix	< 7.3.4.13

References

Timeline

Published: Jul 17, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-17018.9CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by sending a specially CVE-2025-17027.5The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is v CVE-2025-17036.4The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and CVE-2025-17046.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access t CVE-2025-17056.1The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due CVE-2025-17067.5Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2025-17078.8The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This CVE-2025-17087.5The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content.CVE-2025-17096.5Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).CVE-2025-17109.8The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time fr CVE-2025-17117.5Multiple services of the DUT as well as different scopes of the same service reuse the same credentials.CVE-2025-17128.8Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to writ