What is the CVSS score of EUVD-2025-20139?

EUVD-2025-20139 has a CVSS 4.0 base score of 9.5 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red. EPSS exploitation probability: 0.5%.

How to fix or mitigate EUVD-2025-20139?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

EUVD-2025-20139

| CVE-2025-5333 CRITICAL

Code Injection (CWE-94)

2025-07-06 secure@symantec.com

RCE Code Injection

9.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.5 CRITICAL

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 03:31 euvd

EUVD-2025-20139

Analysis Generated

Mar 16, 2026 - 03:31 vuln.today

CVE Published

Jul 06, 2025 - 14:15 nvd

CRITICAL 9.5

DescriptionCVE.org

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

Analysis

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

Technical ContextAI

Remote code execution allows an attacker to run arbitrary commands or code on the target system over a network without prior authentication. This vulnerability is classified as Code Injection (CWE-94).

RemediationAI

Apply vendor patches immediately. Restrict network access to vulnerable services. Implement network segmentation and monitoring for anomalous activity.