CVE-2025-5873

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-284CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-587307.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587317.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587327.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587337.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587347.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587357.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587367.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587377.0Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.CVE-2025-587387.0Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.CVE-2025-587396.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing overCVE-2025-58744.6A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function run_query of the CVE-2025-587405.5The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows
CVE-2025-5873: Medium severity, CVSS 6.3 | Vulnix