What is the CVSS score of CVE-2025-13373?

CVE-2025-13373 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-13373?

Within 24 hours: Inventory all Advantech iView installations and document version numbers; isolate affected systems from untrusted networks if possible. Within 7 days: Implement network-level controls to restrict SNMP trap traffic (port 162) to authorized sources only; deploy WAF/IDS rules to block malicious SNMP payloads; consider disabling SNMP v1 in favor of v3 if operationally feasible. Within 30 days: Monitor Advantech security advisories for patch availability; develop and test migration plan to patched versions; conduct forensic review of SNMP trap logs for exploitation indicators.

CVE-2025-13373

EUVD-2025-201315 HIGH

SQL Injection (CWE-89)

2025-12-04 ics-cert@hq.dhs.gov

SQLi

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:35 euvd

EUVD-2025-201315

Analysis Generated

Mar 15, 2026 - 16:35 vuln.today

CVE Published

Dec 04, 2025 - 23:15 nvd

HIGH 7.5

DescriptionCVE.org

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.

Analysis

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.