Vulnerabilites related to NEC Corporation - RakurakuMusen Start EX
jvndb-2025-000107
Vulnerability from jvndb
Published
2025-11-19 16:22
Modified
2025-11-19 16:22
Severity ?
Summary
Installer of RakurakuMusen Start EX for Windows may insecurely load Dynamic Link Libraries
Details
Installer of RakurakuMusen Start EX for Windows provided by NEC Corporation uses an inappropriate DLL search path list, which may lead to insecurely loading Dynamic Link Libraries.<ul><li>Uncontrolled search path element (CWE-427) - CVE-2025-12852</li></ul>
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000107.html",
  "dc:date": "2025-11-19T16:22+09:00",
  "dcterms:issued": "2025-11-19T16:22+09:00",
  "dcterms:modified": "2025-11-19T16:22+09:00",
  "description": "Installer of RakurakuMusen Start EX for Windows provided by NEC Corporation uses an inappropriate DLL search path list, which may lead to insecurely loading Dynamic Link Libraries.\u003cul\u003e\u003cli\u003eUncontrolled search path element (CWE-427) - CVE-2025-12852\u003c/li\u003e\u003c/ul\u003e",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000107.html",
  "sec:cpe": {
    "#text": "cpe:/a:nec:rakuraku_wlanstart_ex",
    "@product": "RakurakuMusen Start EX",
    "@vendor": "NEC Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-000107",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN50288352/index.html",
      "@id": "JVN#50288352",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "Japan Vulnerability Notes JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-12852",
      "@id": "CVE-2025-12852",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Installer of RakurakuMusen Start EX for Windows may insecurely load Dynamic Link Libraries"
}