PT-2025-20046 · Unknown · Sepunion Service

Balance · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-20961

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions sepunion service versions prior to SMR May-2025 Release 1

Description The issue is related to improper handling of insufficient permission or privileges in the sepunion service, allowing local privileged attackers to access files with system privilege. This can lead to privilege escalation.

Recommendations For versions prior to SMR May-2025 Release 1, update to SMR May-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2025-20961

Affected Products

Sepunion Service

References · 7

• https://osv.dev/vulnerability/CVE-2025-20961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20961 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05 · Vendor Advisory
• https://twitter.com/CVEnew/status/1920038109695078449 · Twitter Post
• https://t.me/cvenotify/121170 · Telegram Post
• https://t.me/cvedetector/24704 · Telegram Post
• https://t.me/cvetracker/23237 · Telegram Post