Elseta Vinci Protocol Analyzer

Summary

Vulnerabilities 1

• Critical 9.9
  CVE-2025-1265

  Elseta Vinci Protocol Analyzer OS Command Injection

  An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an attacker to escalate privileges and perform code execution on affected system.

  Elseta Vinci Protocol Analyzer
  Feb 20, 2025

Revision history

1. 2025-02-18 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-051-06 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014