PT-2025-40306 · Unknown · Ts3-Manager+1

Kr1Shna4Garwal + 1 · Published 2025-10-01 · Updated 2025-10-20 · CVE-2025-61582

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TS3 Manager versions 2.2.1 and earlier

Description TS3 Manager, a web interface for Teamspeak3 servers, contains a flaw that allows an unauthenticated attacker to terminate the application. This occurs by submitting specially crafted Unicode input to the Server field on the login page. The application improperly handles Unicode tag characters during ASCII conversion, leading to an unhandled exception and application crash within four to five seconds.

Recommendations Update to version 2.2.2 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-61582

GHSA-4CQ4-HP4F-8W7P

Affected Products

Ts3-Manager

Teamspeak3

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61582.json · Exploit
• 🔥 https://github.com/joni1802/ts3-manager/security/advisories/GHSA-4cq4-hp4f-8w7p · Exploit
• https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5e · Patch
• https://osv.dev/vulnerability/CVE-2025-61582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61582 · Security Note
• https://t.me/CVEtracker/33890 · Telegram Post
• https://t.me/cveNotify/139488 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973637450032459838 · Twitter Post
• https://twitter.com/offseq/status/1973606934684000279 · Twitter Post
• https://t.me/cveNotify/137135 · Telegram Post
• https://twitter.com/CVEnew/status/1973520879741964645 · Twitter Post