PT-2025-11533 · Unknown · Keytop 路内停车收费系统

Sechzredo · Published 2025-03-17 · Updated 2025-03-17 · CVE-2025-2388

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Keytop 路内停车收费系统 version 2.7.1

Description A critical issue has been identified, affecting an unknown functionality of the file /saas/commonApi/park/getParks of the component API. This leads to improper authentication. The issue can be exploited remotely.

Recommendations For version 2.7.1, consider restricting access to the /saas/commonApi/park/getParks API endpoint to minimize the risk of exploitation. As a temporary workaround, review and strengthen authentication mechanisms until a patch is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-2388

Affected Products

Keytop 路内停车收费系统

References · 9

• 🔥 https://github.com/K-mxredo/MXdocument/wiki · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2388 · Security Note
• https://t.me/latest_high_impact_cve/1989 · Telegram Post
• https://vuldb.com/?submit.516710 · Note
• https://t.me/cvedetector/20510 · Telegram Post
• https://vuldb.com/?id.299887 · Note
• https://twitter.com/CVEnew/status/1901700092228178390 · Twitter Post
• https://t.me/cvetracker/19307 · Telegram Post
• https://vuldb.com/?ctiid.299887 · Note