PT-2025-20654 · Shanghai Bairui Information Technology · Sunloginclient

Ba1_Ma0 · Published 2025-05-11 · Updated 2025-05-16 · CVE-2025-4532

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Shanghai Bairui Information Technology SunloginClient version 15.8.3.19819

Description A critical vulnerability has been found in the library process.dll of the file sunlogin guard.exe, affecting an unknown part. The manipulation leads to an uncontrolled search path. Local access is required to approach this attack, with a rather high complexity and difficult exploitability. The exploit has been disclosed to the public and may be used.

Recommendations For Shanghai Bairui Information Technology SunloginClient version 15.8.3.19819, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426

CWE-427

Related Identifiers

CVE-2025-4532

Affected Products

Sunloginclient

References · 12

• 🔥 https://yuque.com/ba1ma0-an29k/nnxoap/ey9gzmpiqfltiici?singleDoc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4532 · Security Note
• https://vuldb.com/?submit.566141 · Note
• https://twitter.com/cracbot/status/1923332678201581668 · Twitter Post
• https://t.me/cvenotify/121666 · Telegram Post
• https://vuldb.com/?id.308277 · Note
• https://twitter.com/CVEnew/status/1921457046886748543 · Twitter Post
• https://twitter.com/cracbot/status/1922970305255047315 · Twitter Post
• https://t.me/latest_high_impact_cve/2329 · Telegram Post
• https://t.me/cvedetector/25037 · Telegram Post
• https://vuldb.com/?ctiid.308277 · Note
• https://t.me/cvetracker/23573 · Telegram Post