cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of May 5, 2025
Multiple vulnerabilities have been discovered in various products, including WordPress plugins, Arista Networks' CloudVision Portal, Avira Prime, and ATEN's LCD KVM over IP Switch CL5708IM. These vulnerabilities can lead to unauthorized data modification, privilege escalation, and remote code execution. The affected products include 1 Click WordPress Migration Plugin, Aira Prime, Arista CloudVision Portal, and ATEN's CL5708IM. The vulnerabilities have been assigned CVSS scores ranging from 7.3 to 10, indicating high to critical severity. The vulnerabilities can be exploited remotely, while others require local access or authenticated users. The affected products are used in various industries, including cybersecurity, networking, and e-commerce. The vulnerabilities have been disclosed to the public, and exploits may be available. Users are advised to update their products to the latest versions and apply security patches to prevent exploitation. The vulnerabilities have been assigned CVE IDs, including CVE-2025-3455, CVE-2024-9524, and CVE-2025-0505.