PT-2025-33747 · Ezged3 · Ezged3

Ballpoint · Published 2025-08-19 · Updated 2025-12-05 · CVE-2025-51539

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions EzGED3 versions prior to 3.5.72.27183

Description EzGED3 contains an unauthenticated arbitrary file read issue because of inadequate access control and insufficient input validation within a script accessible through the web interface. A remote attacker can provide a manipulated path parameter to a PHP script to read arbitrary files from the filesystem. The script lacks authentication checks and secure path handling, allowing directory traversal attacks (e.g., ../../../) to access sensitive files such as configuration files, database dumps, source code, and password reset tokens. If phpMyAdmin is exposed, extracted credentials could be used for direct administrative access. In environments without phpMyAdmin, attacker-controlled file reads can still allow full database extraction by targeting raw MySQL data files.

Recommendations Update EzGED3 to version 3.5.72.27183 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-51539

Affected Products

Ezged3

References · 8

• 🔥 https://ballpoint.fr/en/blog/ezged3-preauth-file-read-admin-takeover · Exploit
• https://osv.dev/vulnerability/CVE-2025-51539 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-51539 · Security Note
• https://twitter.com/leak_ix/status/1996852043667894630 · Twitter Post
• https://twitter.com/CVEnew/status/1957839898108653964 · Twitter Post
• https://t.me/cveNotify/137737 · Telegram Post
• https://t.me/cveNotify/132839 · Telegram Post
• https://leakix.net/search?q=%2Bplugin%3AEzGED3Plugin&scope=leak · Reddit Post