Details of VAR-202508-0188

ID

VAR-202508-0188

CVE

CVE-2025-8654

TITLE

JVCKENWOOD Corporation of DMX958XR in the firmware OS Command injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2025-011017

DESCRIPTION

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReadMVGImage function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26313. JVCKENWOOD Corporation of DMX958XR The firmware has OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The Kenwood DMX958XR is an in-vehicle infotainment system from Kenwood

Trust: 2.79

sources: NVD: CVE-2025-8654 // JVNDB: JVNDB-2025-011017 // ZDI: ZDI-25-802 // CNVD: CNVD-2025-20287

IOT TAXONOMY

category:

['IoT']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-20287

AFFECTED PRODUCTS

vendor:	jvckenwood	model:	dmx958xr	scope:	eq	version:	1.0.0509.3100	Trust: 1.0
vendor:	jvckenwood	model:	dmx958xr	scope:	eq	version:	dmx958xr firmware 1.0.0509.3100	Trust: 0.8
vendor:	jvckenwood	model:	dmx958xr	scope:	-	version:	-	Trust: 0.8
vendor:	jvckenwood	model:	dmx958xr	scope:	eq	version:	-	Trust: 0.8
vendor:	kenwood	model:	dmx958xr	scope:	-	version:	-	Trust: 0.7
vendor:	kenwood	model:	dmx958xr	scope:	eq	version:	1.0.0509.3100	Trust: 0.6

sources: ZDI: ZDI-25-802 // CNVD: CNVD-2025-20287 // JVNDB: JVNDB-2025-011017 // NVD: CVE-2025-8654

CVSS

SEVERITY

CVSSV2

CVSSV3

zdi-disclosures@trendmicro.com:	CVE-2025-8654
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2025-011017
value:	HIGH
Trust: 0.8
ZDI:	CVE-2025-8654
value:	HIGH
Trust: 0.7
CNVD:	CNVD-2025-20287
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-20287
severity:	HIGH
baseScore:	8.3
vectorString:	AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

zdi-disclosures@trendmicro.com:	CVE-2025-8654
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
OTHER:	JVNDB-2025-011017
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8
ZDI:	CVE-2025-8654
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-25-802 // CNVD: CNVD-2025-20287 // JVNDB: JVNDB-2025-011017 // NVD: CVE-2025-8654

PROBLEMTYPE DATA

problemtype:	CWE-78	Trust: 1.0
problemtype:	OS Command injection (CWE-78) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-011017 // NVD: CVE-2025-8654

EXTERNAL IDS

db:	NVD	id:	CVE-2025-8654	Trust: 3.9
db:	ZDI	id:	ZDI-25-802	Trust: 2.5
db:	JVNDB	id:	JVNDB-2025-011017	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-26313	Trust: 0.7
db:	CNVD	id:	CNVD-2025-20287	Trust: 0.6

sources: ZDI: ZDI-25-802 // CNVD: CNVD-2025-20287 // JVNDB: JVNDB-2025-011017 // NVD: CVE-2025-8654

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-25-802/	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2025-8654	Trust: 1.4

sources: CNVD: CNVD-2025-20287 // JVNDB: JVNDB-2025-011017 // NVD: CVE-2025-8654

CREDITS

Viettel Cyber Security

Trust: 0.7

sources: ZDI: ZDI-25-802

SOURCES

db:	ZDI	id:	ZDI-25-802
db:	CNVD	id:	CNVD-2025-20287
db:	JVNDB	id:	JVNDB-2025-011017
db:	NVD	id:	CVE-2025-8654

LAST UPDATE DATE

2025-09-08T23:18:51.908000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-25-802	date:	2025-08-05T00:00:00
db:	CNVD	id:	CNVD-2025-20287	date:	2025-09-04T00:00:00
db:	JVNDB	id:	JVNDB-2025-011017	date:	2025-08-08T07:05:00
db:	NVD	id:	CVE-2025-8654	date:	2025-08-07T16:50:12.847

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-25-802	date:	2025-08-05T00:00:00
db:	CNVD	id:	CNVD-2025-20287	date:	2025-09-05T00:00:00
db:	JVNDB	id:	JVNDB-2025-011017	date:	2025-08-08T00:00:00
db:	NVD	id:	CVE-2025-8654	date:	2025-08-06T02:15:54.227