PT-2025-32347 · Fujifilm Healthcare Americas · Synapse Mobility

Christopher Alejandro + 1 · Publicado 2025-08-08 · Atualizado 2025-08-21 · CVE-2025-54551

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Synapse Mobility versions 8.0 through 8.1.1

Description: Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameters. If exploited, a user of the product may escalate privileges and access data they are not authorized to view by altering the parameters of the search function.

Recommendations: For Synapse Mobility version 8.0, restrict access to the search function parameters. For Synapse Mobility version 8.0.1, restrict access to the search function parameters. For Synapse Mobility version 8.0.2, restrict access to the search function parameters. For Synapse Mobility version 8.1, restrict access to the search function parameters. For Synapse Mobility version 8.1.1, restrict access to the search function parameters.

Correção

LPE

Enumeração de Fraquezas

CWE-472

Identificadores relacionados

CVE-2025-54551

Produtos afetados

Synapse Mobility

Referências · 8

• https://t.me/cveNotify/132866 · Publicação no Telegram
• https://twitter.com/xmoroco/status/1953636467148042318 · Publicação no Twitter
• https://healthcaresolutions-us.fujifilm.com/synapse-mobility-vulnerability-notification · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-54551 · Nota de Segurança
• https://twitter.com/xmoroco/status/1958584134760124528 · Publicação no Twitter
• https://jvn.jp/en/vu/JVNVU94286093 · Nota
• https://t.me/CVEtracker/30440 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1958044160155377828 · Publicação no Twitter