CVE-2025-48415

MEDIUM Year: 2025
CVSS v3 Score
6.2
Medium
Weakness Type
CWE-749
View all →

Vulnerability Description

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.

Related Vulnerabilities

CVE-2020-10268

MEDIUM
CVSS:6.1(Medium)

Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this onl...

CWE-7492020

CVE-2018-8868

MEDIUM
CVSS:6.4(Medium)

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monit...

CWE-7492018

CVE-2025-43003

MEDIUM
CVSS:6.4(Medium)

SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the a...

CWE-7492025

CVE-2019-20923

MEDIUM
CVSS:6.5(Medium)

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to ...

CWE-7492019

CVE-2019-4386

MEDIUM
CVSS:6.5(Medium)

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID: 162714.

CWE-7492019

CVE-2020-17391

MEDIUM
CVSS:6.5(Medium)

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code ...

CWE-7492020