PT-2025-20042 · Unknown · Smart Manager

开元米粉实力代购 · Publicado 2025-05-07 · Atualizado 2025-05-12 · CVE-2025-20957

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmartManagerCN versions prior to SMR May-2025 Release 1

Description The issue is related to improper access control in SmartManagerCN, which allows local attackers to launch arbitrary activities with SmartManagerCN privilege. This can be exploited by attackers to gain unauthorized access and perform malicious actions.

Recommendations For versions prior to SMR May-2025 Release 1, update to SMR May-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features and functionalities within SmartManagerCN to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2025-20957

Produtos afetados

Smart Manager

Referências · 8

• https://twitter.com/cracbot/status/1921883141243064397 · Publicação no Twitter
• https://twitter.com/cybercronai/status/1920147313558691922 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-20957 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1920038113126072668 · Publicação no Twitter
• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-20957 · Nota de Segurança
• https://t.me/cvenotify/121166 · Publicação no Telegram
• https://twitter.com/cybercronai/status/1920135423323513202 · Publicação no Twitter