--- title: "Security digest: March 19, 2025" url: https://erroneo.us/security/2025-03-19/ description: "March 19, 2025 vulnerability digest: 3 CISA KEV additions (Edimax, NAKIVO, SAP); 1 critical advisory (PyPI). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-03-19 date_modified: 2025-03-19 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: March 19, 2025 3 known exploited (cisa kev) additions and 1 critical advisory. ## Take stock - Do you run any of these? Edimax IC-7100 IP Camera, NAKIVO Backup and Replication, SAP NetWeaver. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-04-09. - PyPI: 1 critical advisory ( vllm ). Check with pip-audit (or: pip show ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2025-1316](https://erroneo.us/security/cve/CVE-2025-1316/index.md) Edimax IC-7100 IP Camera: Edimax IC-7100 IP Camera OS Command Injection Vulnerability (CISA due 2025-04-09) - [CVE-2024-48248](https://erroneo.us/security/cve/CVE-2024-48248/index.md) NAKIVO Backup and Replication: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability (CISA due 2025-04-09) - [CVE-2017-12637](https://erroneo.us/security/cve/CVE-2017-12637/index.md) SAP NetWeaver: SAP NetWeaver Directory Traversal Vulnerability (CISA due 2025-04-09) ## Critical advisories - [CVE-2025-29783](https://erroneo.us/security/cve/CVE-2025-29783/index.md) vLLM Allows Remote Code Execution via Mooncake Integration — PyPI vllm >= 0.6.5, < 0.8.0 → 0.8.0 --- Source page: https://erroneo.us/security/2025-03-19/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt