PT-2025-40306 · Unknown · Ts3-Manager+1

Kr1Shna4Garwal + 1 · Publicado 2025-10-01 · Atualizado 2025-10-20 · CVE-2025-61582

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TS3 Manager versions 2.2.1 and earlier

Description TS3 Manager, a web interface for Teamspeak3 servers, contains a flaw that allows an unauthenticated attacker to terminate the application. This occurs by submitting specially crafted Unicode input to the Server field on the login page. The application improperly handles Unicode tag characters during ASCII conversion, leading to an unhandled exception and application crash within four to five seconds.

Recommendations Update to version 2.2.2 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-61582

GHSA-4CQ4-HP4F-8W7P

Produtos afetados

Ts3-Manager

Teamspeak3

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61582.json · Exploit
• 🔥 https://github.com/joni1802/ts3-manager/security/advisories/GHSA-4cq4-hp4f-8w7p · Exploit
• https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5e · Correção
• https://t.me/CVEtracker/33890 · Publicação no Telegram
• https://t.me/cveNotify/139488 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1973637450032459838 · Publicação no Twitter
• https://twitter.com/offseq/status/1973606934684000279 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-61582 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-61582 · Nota de Segurança
• https://t.me/cveNotify/137135 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1973520879741964645 · Publicação no Twitter