CVE-2025-1700

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-17 · updated 2026-06-17
Weakness: CWE-427

Description

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during installation of the software.

Affected products

Motorola Software Fix: before 7.3.4.13 — fixed in 7.3.4.13

How to fix

Upgrade to a fixed version: Motorola Software Fix 7.3.4.13. Check the vendor advisory for mitigations.

References

https://en-us.support.motorola.com/app/answers/detail/a_id/186730/~/motorola-software-fix-installer-vulnerability
https://support.lenovo.com/us/en/product_security/LEN-194483

Get alerted when CVE-2025-1700 or the next vulnerability affects your stack