CVE-2025-47697

Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user.

Score

CVSS 3.1 7.5 High

Status

Analyzed - vultures@jpcert.or.jp

Published

2025-05-30

Last modified

2025-05-30

Weaknesses

CWE-602

Affected products

• Wivia 5 Firmware (Uchida)
• Wivia 5 (Uchida Yoko Co. Ltd.)

References

• https://jvn.jp/en/jp/JVN51394666/
• https://www.uchida.co.jp/wivia/support02.html