PT-2025-16101 · Bizrobo! · Bizrobo!

Published 2025-04-11 · Updated 2025-04-11 · CVE-2025-31932

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: BizRobo! (affected versions not specified)

Description: A deserialization of untrusted data issue exists in BizRobo!. If this issue is exploited, an arbitrary code is executed on the Management Console. The vendor provides workaround information and recommends applying it to the deployment environment.

Recommendations: Apply the workaround provided by the vendor to the deployment environment. As a temporary workaround, consider restricting access to the Management Console until the issue is resolved. Avoid using untrusted data in the deserialization process until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-31932

Affected Products

Bizrobo!

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-31932 · Security Note
• https://knowledge.bizrobo.com/hc/ja/articles/39952052043289 · Note
• https://t.me/cvenotify/118817 · Telegram Post
• https://t.me/cvetracker/21411 · Telegram Post
• https://knowledge.bizrobo.com/hc/ja/articles/360029772271 · Note
• https://jvn.jp/en/jp/JVN30641875 · Note
• https://knowledge.bizrobo.com/hc/ja/articles/39953373809305 · Note
• https://twitter.com/CVEnew/status/1910631492436345301 · Twitter Post
• https://t.me/cvedetector/22731 · Telegram Post
• https://knowledge.bizrobo.com/hc/ja/articles/39951710517145 · Note