PT-2025-38539 · Creality · Creality Cloud App

Fxizenta · Published 2025-09-19 · Updated 2025-09-19 · CVE-2025-10716

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Creality Cloud App versions up to 6.1.0

Description A flaw has been found in Creality Cloud App for Android. The vulnerability is due to improper export of android application components within the AndroidManifest.xml file of the com.cxsw.sdprinter component. This can allow for local execution of an attack. The vendor was contacted but did not respond.

Recommendations Update Creality Cloud App to a version beyond 6.1.0.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-10716

Affected Products

Creality Cloud App

References · 7

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.cxsw.sdprinter.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10716 · Security Note
• https://vuldb.com/?submit.645009 · Note
• https://twitter.com/VulmonFeeds/status/1969074239312417214 · Twitter Post
• https://vuldb.com/?id.325007 · Note
• https://twitter.com/CVEnew/status/1969110890214801412 · Twitter Post
• https://vuldb.com/?ctiid.325007 · Note