PT-2025-10627 · Unknown · Umatigateway

Ccvca · Published 2025-03-10 · Updated 2025-03-10 · CVE-2025-27615

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions umatiGateway (affected versions not specified)

Description The user interface of umatiGateway may be publicly accessible, allowing configuration viewing and alteration. A commit uses 127.0.0.1:8080:8080 to limit access to the local network. As a workaround, a firewall on Port 8080 may block remote access, but it may not be perfect due to Docker's port forwarding rules.

Recommendations For those who cannot apply the proposed patch, consider configuring a firewall to block remote access on Port 8080 as a temporary mitigation measure. Restrict access to the user interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-02582

CVE-2025-27615

GHSA-QF9W-X9QX-2MQ7

Affected Products

Umatigateway

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27615.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-27615 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27615 · Security Note
• https://github.com/umati/umatiGateway/commit/5d81a3412bc0051754a3095d89a06d6d743f2b16 · Note
• https://github.com/umati/umatiGateway/security/advisories/GHSA-qf9w-x9qx-2mq7 · Note
• https://github.com/umati/umatiGateway/pull/101 · Note
• https://github.com/umati/umatiGateway/blob/abe73096a17307327f0d6dc0ed4db1fb93464521/README.md?plain=1#L34-L35 · Note
• https://twitter.com/CVEnew/status/1899176721569481119 · Twitter Post
• https://t.me/cvetracker/18842 · Telegram Post
• https://t.me/cvedetector/19993 · Telegram Post