CVE-2025-7097

CWE-77 — Command Injection CWE-78 — OS Command Injection3 documents3 sources

Severity

8.2HIGH

EPSS

1.3%

top 20.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Comodo Internet Security Premium Comodo Internet Security

Timeline

PublishedJul 6

Latest updateJul 7

Description

A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation of the argument binary/params leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The ve…

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5comodo/internet_security_premium12.3.4.8162

▶NVDcomodo/internet_security12.3.4.8162

🔴Vulnerability Details

GHSA

GHSA-483x-j2mh-6x95: A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12↗2025-07-07

▶

CVEList

Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection↗2025-07-06

▶