How severe is CVE-2025-47416?

CVE-2025-47416 has a CVSS 4.0 base score of 5.9, rated medium severity.

Is CVE-2025-47416 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-47416?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-47416 have an EU (EUVD) identifier?

Yes. CVE-2025-47416 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-27258.

When was CVE-2025-47416 published?

CVE-2025-47416 was published on 2025-09-09 and last updated on 2026-06-17.

CVE-2025-47416

CVE-2025-47416 is a medium-severity vulnerability with a CVSS 4.0 base score of 5.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-697.

Key facts

Severity: Medium (CVSS 4.0 base score 5.9)
EPSS exploit prediction: 0% (27th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-27258
Weakness: CWE-697
Published: 2025-09-09
Last modified: 2026-06-17

Description

A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party researcher discovered that the ConsoleFindCommandMatchList enumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 Fixed Firmware: no fixed released (product is discontinued and end of life) For x70  The Affected Firmware:- 3.000.0110.001  and versions below The Fixed Firmware:- 3.001.0031.001

Frequently asked questions

What is CVE-2025-47416?: A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party researcher discovered that the ConsoleFindCommandMatchList enumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 Fixed Firmware: no fixed released (product is discontinued and end of life) For x70  The Affected Firmware:- 3.000.0110.001  and versions below The Fixed Firmware:- 3.001.0031.001
How severe is CVE-2025-47416?: CVE-2025-47416 has a CVSS 4.0 base score of 5.9, rated medium severity.
Is CVE-2025-47416 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-47416?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-47416 have an EU (EUVD) identifier?: Yes. CVE-2025-47416 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-27258.
When was CVE-2025-47416 published?: CVE-2025-47416 was published on 2025-09-09 and last updated on 2026-06-17.

References

Other CWE-697 vulnerabilities

CVE-2025-54336 — Critical (CVSS 9.8): In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed…
CVE-2024-24621 — Critical (CVSS 9.8): Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote,…
CVE-2024-5217 — Critical (CVSS 9.8): ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and…
CVE-2023-32571 — Critical (CVSS 9.8): Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when…
CVE-2022-47034 — Critical (CVSS 9.8): A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass…
CVE-2021-44971 — Critical (CVSS 9.8): Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0…

Browse all CWE-697 vulnerabilities →