PT-2025-17892 · Quantum · Activescale Cold Storage+2

Justine Osborne · Published 2025-04-25 · Updated 2025-07-01 · CVE-2025-46617

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions StorNext RYO versions prior to 7.2.4 StorNext Xcellis Workflow Director versions prior to 7.2.4 ActiveScale Cold Storage versions prior to 7.2.4

Description The issue allows access to internal configuration and unauthorized modification of software configuration parameters via undocumented user credentials.

Recommendations For StorNext RYO versions prior to 7.2.4, update to version 7.2.4 or later. For StorNext Xcellis Workflow Director versions prior to 7.2.4, update to version 7.2.4 or later. For ActiveScale Cold Storage versions prior to 7.2.4, update to version 7.2.4 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-46617

Affected Products

Activescale Cold Storage

Stornext Ryo

Stornext Xcellis Workflow Director

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-46617 · Security Note
• https://t.me/cvetracker/22358 · Telegram Post
• https://twitter.com/samilaiho/status/1917099651213496761 · Twitter Post
• https://twitter.com/justine_osborne/status/1939932381558812822 · Twitter Post
• https://twitter.com/cybercronai/status/1915790585564172445 · Twitter Post
• https://twitter.com/CVEnew/status/1915665987195507005 · Twitter Post
• https://twitter.com/adriananglin/status/1917184287604117853 · Twitter Post
• https://twitter.com/CCBalert/status/1915773139578912909 · Twitter Post
• https://t.me/pentestingnews/60352 · Telegram Post
• https://quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities · Note
• https://t.me/latest_high_impact_cve/2194 · Telegram Post
• https://t.me/cvedetector/23743 · Telegram Post