CVE-2025-5872

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an unknown part of the component Setting Handler. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-287CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-587207.8Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose infCVE-2025-587227.8Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.CVE-2025-587247.8Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.CVE-2025-587257.0Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.CVE-2025-587267.5Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.CVE-2025-587277.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service alCVE-2025-587287.8Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.CVE-2025-587296.5Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a nCVE-2025-58736.3A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the filCVE-2025-587307.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587317.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587327.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-5872: Medium severity, CVSS 5.3 | Vulnix