PT-2025-37182 · Unknown · Seat Queue Ticket Kiosk

J369 · Published 2025-09-11 · Updated 2025-09-11 · CVE-2025-10252

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SEAT Queue Ticket Kiosk versions up to 20250827

Description: A flaw exists in the Java RMI Registry Handler component of SEAT Queue Ticket Kiosk. This issue allows for deserialization, and can only be exploited within a local network. The exploitability of this issue is considered difficult and requires high complexity. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

RCE

Weakness Enumeration

CWE-502

CWE-20

Related Identifiers

CVE-2025-10252

Affected Products

Seat Queue Ticket Kiosk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10252 · Security Note
• https://vuldb.com/?id.323612 · Note
• https://vuldb.com/?ctiid.323612 · Note
• https://vuldb.com/?submit.642598 · Note
• https://twitter.com/VulmonFeeds/status/1966168046789152916 · Twitter Post