CVE-2025-3621: ProTNS ActADUR, инжекция

Описание

Оригинално описание

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems.  * vulnerabilities: * Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard-coded Credentials * Improper Authentication * Binding to an Unrestricted IP Address The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.

Засегнати продукти

• ProTNS ActADUR: v2.0.1.9 преди v2.0.2.0

Вид слабост

• CWE-77 Инжектиране на команди
• CWE-798 Use of Hard-coded Credentials
• CWE-287 Неправилна автентикация
• CWE-1327 Binding to an Unrestricted IP Address

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-3621
• https://nvd.nist.gov/vuln/detail/CVE-2025-3621
• https://www.protns.com/53