Approved changes feed: RSS · Atom

cpe:2.3:o:uchida:wivia_5_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorUchida (8bd963ab-5d07-5f43-8041-41f397e32202)
ProductWivia 5 Firmware (64bf0127-6684-5c94-8a02-cf2e0dbe73c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47697 vulnerable 2026-06-08 07:27:14.740127 Details available
MEDIUM (6.5)
Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user.
Published: 2025-05-30T06:36:16.947Z
Updated: 2025-05-30T12:18:17.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41406 vulnerable 2026-06-08 07:25:06.995926 Details available
MEDIUM (5.4)
Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.
Published: 2025-05-30T06:36:08.387Z
Updated: 2025-05-30T12:19:09.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41385 vulnerable 2026-06-08 07:25:06.921705 Details available
MEDIUM (6.7)
An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a logged-in administrative user.
Published: 2025-05-30T06:35:56.222Z
Updated: 2025-05-30T13:05:39.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.