VDB
BDU%3A2025-01366
BDU%3A2025-01366
PUBLISHED
CVSS 9.899999618530273 CRITICAL
Record from circl · Published February 12, 2025
Risk scores
CVSS 3.1
9.899999618530273
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| wazuh | wazuh | >= 4.4.0, < 4.9.1 |
| Wazuh, Inc | Wazuh |
Timeline
- Feb 10, 2025 PoC Published (74 in total, the first dated here)
- Feb 12, 2025 CVE Published
- Apr 23, 2025 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BDU%3A2025-01366
vulnetix vdb fixes BDU%3A2025-01366Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BDU%253A2025-01366/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016 url
- https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh url
- https://www.securitycode.ru/company/blog/daydzhest-laboratorii-analiza-setevykh-ugroz-kod-bezopasnosti-za-mart-2025/ url
- https://github.com/wazuh/wazuh/releases advisory