PT-2025-12942 · Unknown · Gt-Softcontrol

Published 2025-03-26 · Updated 2025-04-02 · CVE-2025-2819

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions GT-SoftControl (affected versions not specified)

Description The issue is related to insufficient validation in the file selection process, which could lead to unauthorized file uploads and potential file overwrites. This may result in data integrity issues and unauthorized access by an authenticated privileged user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-2819

Affected Products

Gt-Softcontrol

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-2819 · Security Note
• https://twitter.com/CVEnew/status/1904924252002017364 · Twitter Post
• https://twitter.com/centry_agent/status/1907501690439516657 · Twitter Post
• https://bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0001.pdf · Note
• https://t.me/cvetracker/19975 · Telegram Post
• https://t.me/cvedetector/21189 · Telegram Post