PT-2025-29884 · Idera · Idera Up.Time Monitoring Station

Denis Andzakovic · Published 2025-07-16 · Updated 2025-07-17 · CVE-2025-34121

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Idera Up.Time Monitoring Station versions up to and including 7.2

Description An unauthenticated arbitrary file upload issue exists. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot, resulting in remote code execution as the web server user.

Recommendations Update Idera Up.Time Monitoring Station to a version newer than 7.2. As a temporary workaround, restrict access to the wizards/post2file.php script.

Exploit

Fix

RCE

Missing Authentication

Unrestricted File Upload

Weakness Enumeration

CWE-306

CWE-434

Related Identifiers

CVE-2025-34121

Affected Products

Idera Up.Time Monitoring Station

References · 8

• 🔥 https://exploit-db.com/exploits/38732 · Exploit
• 🔥 https://web.archive.org/web/20150210113937/http://security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf · Exploit
• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/uptime_file_upload_1.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34121 · Security Note
• https://vulncheck.com/advisories/idera-uptime-arbitrary-file-upload-rce · Note
• https://twitter.com/VulmonFeeds/status/1945681455415202280 · Twitter Post
• https://twitter.com/CVEnew/status/1945598202255737319 · Twitter Post
• https://t.me/cvetracker/28006 · Telegram Post