PT-2025-29540 · Protns · Actadur

Published 2025-07-15 · Updated 2025-07-30 · CVE-2025-3621

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions ActADUR versions 2.0.1.9 through 2.0.1.9

Description The ActADUR local server product, developed and maintained by ProTNS, allows for Remote Code Inclusion on host systems. The vulnerability has been rated as critical and includes issues such as improper neutralization of special elements used in a command (Command Injection), use of hard-coded credentials, improper authentication, and binding to an unrestricted IP address.

Recommendations Update to version 2.0.2.0 or above.

Fix

Improper Authentication

Using Hardcoded Credentials

Command Injection

Weakness Enumeration

CWE-1327

CWE-287

CWE-798

CWE-77

Related Identifiers

CVE-2025-3621

Affected Products

Actadur

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-3621 · Security Note
• https://twitter.com/CveFindCom/status/1945025540877951312 · Twitter Post
• https://twitter.com/SecAideInfo/status/1945789971601731912 · Twitter Post
• https://t.me/cvenotify/128966 · Telegram Post
• https://protns.com/53 · Note
• https://twitter.com/CVEnew/status/1945026519702634748 · Twitter Post
• https://t.me/cvetracker/27846 · Telegram Post
• https://twitter.com/cracbot/status/1946887862882079085 · Twitter Post
• https://twitter.com/jmdevlabs/status/1950642956949499991 · Twitter Post