PT-2025-15269 · Philips · Intellispace Portal

Published 1999-01-01 · Updated 2025-04-12 · CVE-2025-3425

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:A/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions IntelliSpace Portal versions 12 and prior

Description The issue arises from the exploitation of port 755 through a deserialization vulnerability in the IntelliSpace portal application, which utilizes .NET Remoting for its functionality. The server's configuration files have the TypeFilterLevel set to Full, potentially leading to remote code execution using deserialization.

Recommendations For IntelliSpace Portal versions 12 and prior, consider restricting access to port 755 as a temporary workaround until a patch is available. Additionally, review and adjust the TypeFilterLevel setting in the configuration files to a more secure level to minimize the risk of exploitation.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-04096

CVE-2025-3425

DOTNETREMOTINGCHECK

Affected Products

Intellispace Portal

References · 12

• https://bdu.fstec.ru/vul/2025-04096 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-3425 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3425 · Security Note
• https://twitter.com/CVEnew/status/1909279367001465228 · Twitter Post
• https://twitter.com/huntfree27/status/1911135657608569258 · Twitter Post
• https://twitter.com/cybercronai/status/1909309210157822188 · Twitter Post
• https://feedly.com/cve/CVE-2025-3425 · Note
• https://t.me/cvetracker/21019 · Telegram Post
• https://twitter.com/cybercronai/status/1909754530318688592 · Twitter Post
• https://philips.com/a-w/security/security-advisories.html#security_advisories · Note
• https://github.com/advisories/GHSA-m7f8-37g5-8r53 · Note
• https://t.me/cvedetector/22318 · Telegram Post