CVE-2025-7344: Digiwin｜EAI - Privilege Escalation

Published Jul 21, 2025

Updated

The EAI developed by Digiwin has a Privilege Escalation vulnerability, allowing remote attackers with regular privileges to elevate their privileges to administrator level via a specific API.

Affected Software

1 affected component

Digiwin EAI

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Digiwin｜EAI to a version that resolves this vulnerability.
Fixed in 2.3.2Patch KB202504001

Event History

Jul 21, 2025

CVE Published

via MITRE·06:55 AM

Data Sourced

via MITRE·06:55 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Feb 28, 57540

Event

via FIRST·05:09 PM

Frequently Asked Questions

What is the severity of CVE-2025-7344?

CVE-2025-7344 has been classified as a high severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2025-7344?

To fix CVE-2025-7344, apply the latest security patch provided by Digiwin for the EAI product.

Who is affected by CVE-2025-7344?

CVE-2025-7344 affects users of the Digiwin EAI software, specifically those with regular privileges.

What type of vulnerability is CVE-2025-7344?

CVE-2025-7344 is a privilege escalation vulnerability allowing unauthorized access to administrator-level functionality.

Can CVE-2025-7344 be exploited remotely?

Yes, CVE-2025-7344 can be exploited remotely by attackers with regular privileges using a specific API.