arcinfo PcVue up to 12.0.30/15.2.11/16.3.0 Messages unusual condition

Summaryinfo

A vulnerability classified as problematic was found in arcinfo PcVue up to 12.0.30/15.2.11/16.3.0. This affects an unknown function of the component Messages Handler. Executing a manipulation can lead to unusual condition. The identification of this vulnerability is CVE-2025-9998. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability has been found in arcinfo PcVue up to 12.0.30/15.2.11/16.3.0 and classified as problematic. This vulnerability affects an unknown function of the component Messages Handler. The manipulation with an unknown input leads to a unusual condition vulnerability. The CWE definition for the vulnerability is CWE-754. The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product. As an impact it is known to affect availability. CVE summarizes:

The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop.

The weakness was shared by Guillaume André. The advisory is shared for download at pcvue.com. This vulnerability was named CVE-2025-9998 since 09/04/2025. The exploitation appears to be difficult. The attack needs to approached within the local network. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 12.0.31, 15.2.12 or 16.3.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• arcinfo

Name

• PcVue

Version

• 12.0.0
• 12.0.1
• 12.0.2
• 12.0.3
• 12.0.4
• 12.0.5
• 12.0.6
• 12.0.7
• 12.0.8
• 12.0.9
• 12.0.10
• 12.0.11
• 12.0.12
• 12.0.13
• 12.0.14
• 12.0.15
• 12.0.16
• 12.0.17
• 12.0.18
• 12.0.19
• 12.0.20
• 12.0.21
• 12.0.22
• 12.0.23
• 12.0.24
• 12.0.25
• 12.0.26
• 12.0.27
• 12.0.28
• 12.0.29
• 12.0.30
• 15.2.0
• 15.2.1
• 15.2.2
• 15.2.3
• 15.2.4
• 15.2.5
• 15.2.6
• 15.2.7
• 15.2.8
• 15.2.9
• 15.2.10
• 15.2.11
• 16.0
• 16.1
• 16.2
• 16.3.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion