Cologne Firmware
CVE-2025-47399
HIGH
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Buffer copy size validation
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 7.8 (HIGH). Attack vector: Local. Complexity: Low. Privileges required: Low. User interaction: None. |
| Exploit ScenarioDerived | An attacker could exploit this vulnerability to compromise the affected system. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters. [CVSS 7.8 HIGH]
RemediationAI
Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Classified as CWE-120 (Classic Buffer Overflow). Affects Cologne Firmware. Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
Know when Cologne Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
Executive ViewAI
CVE-2025-47399 is a high-severity memory corruption vulnerability affecting sensor property management systems that could allow attackers to crash services or potentially execute arbitrary code through malformed input. Without an available patch, organizations using affected sensor systems face active risk until vendor remediation is released, requiring immediate mitigation measures to protect operational integrity.
Implement network segmentation to restrict access to sensor management interfaces; deploy WAF or IDS/IPS rules to detect and block malformed IOCTL requests targeting sensor property updates; disable remote sensor property update functionality if not business-critical; enforce strict input validation and bounds checking at the application layer; monitor sensor service logs for crashes or anomalous behavior; consider disabling the affected sensor features until vendor patch is available.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Affected Products (CPE)CVE.org
More in Cologne Firmware
View allMemory Corruption when multiple threads concurrently access and modify shared resources. [CVSS 7.8 HIGH]
Video Collaboration Vc3 Platform Firmware versions up to - contains a security vulnerability (CVSS 7.8).
Memory Corruption when processing invalid user address with nonstandard buffer address. [CVSS 7.8 HIGH]
Memory Corruption when accessing buffers with invalid length during TA invocation. [CVSS 7.8 HIGH]
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. [CVSS 7.1 HIGH]
Transient DOS when processing a received frame with an excessively large authentication information element. [CVSS 6.5 M
GitHub PoC
Exploit-DB