CVE-2025-2015
CVSS 3.1 Score 9.9 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 274
Summary
CVE-2025-2015 is a remote code execution vulnerability affecting Ashlar-Vellum Cobalt software due to insufficient validation of user-supplied data during VS file parsing. This issue results in a type confusion condition, allowing attackers to execute arbitrary code on affected systems. Exploitation requires users to visit a malicious website or open a malicious file. The ZDI cataloged this vulnerability as ZDI-CAN-25236.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Meeting Management
Affected Vendors
- Cisco