PT-2025-24412 · Honding Technology · Smart Parking Management System

Brianlin · Published 2025-06-09 · Updated 2025-06-14 · CVE-2025-5894

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart Parking Management System from Honding Technology (affected versions not specified)

Description The issue concerns a Missing Authorization vulnerability, allowing remote attackers with regular privileges to access specific functionality and create administrator accounts. This enables them to log into the system using those accounts, gaining unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-5894

Affected Products

Smart Parking Management System

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-5894 · Security Note
• https://twitter.com/CveFindCom/status/1931987202507944242 · Twitter Post
• https://twitter.com/CVEnew/status/1931982195175956721 · Twitter Post
• https://t.me/cvetracker/25760 · Telegram Post
• https://t.me/cvenotify/125048 · Telegram Post
• https://twcert.org.tw/tw/cp-132-10170-e2435-1.html · Note
• https://twcert.org.tw/en/cp-139-10171-44c0a-2.html · Note
• https://twitter.com/cracbot/status/1933841917852467314 · Twitter Post
• https://t.me/latest_high_impact_cve/2585 · Telegram Post