CVE-2025-1924

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlier

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H

Weakness enumeration

CWE-191 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Feb 13, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-19257.5A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the function amf_nsmf_pdusessi CVE-2025-19264.3The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions CVE-2025-19277.1Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Cross Site Requ CVE-2025-19289.1Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery Syste CVE-2025-19297.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. R CVE-2025-19308.8On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. Th CVE-2025-19317.5It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable cra CVE-2025-19328.1An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 1 CVE-2025-19337.6On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to CVE-2025-19346.5It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection whe CVE-2025-19354.3A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firef CVE-2025-19367.3jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content fr