Dashboard / CVE-2025-30418

CVE-2025-30418

HIGH
MEDIUM Priority: 0.02 BB Relevance: 42/100
Published: 2025-05-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: High
VI: High
VA: High

Description

There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
NI Circuit Design Suite 0
ni circuit_design_suite < 14.3.1

References & Advisories (1)

Bug Bounty Relevance

42 / 100
✓ No authentication
✓ Low complexity

CVSS Score

8.5 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.20%
Raw Score 0.002030
Percentile 10.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00203
2026-11-12
0.00203
2026-11-10
0.00203
2026-11-09
0.00203
2026-11-08
0.00203
2026-11-07
0.00203
2026-11-06
0.00203
2026-11-05
0.00203

Intelligence Sources

mitre ref →
nvd ref →

External Links