PT-2025-41771 · Ebm Technologies · Uniweb/Solipacs Webserver

高于凱 · Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-11671

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Uniweb/SoliPACS WebServer developed by EBM Technologies (affected versions not specified)

Description A missing authentication issue exists in Uniweb/SoliPACS WebServer developed by EBM Technologies. This allows unauthenticated remote attackers to access a specific page and obtain information, including account names and IP addresses. The affected API endpoint is not specified. The vulnerable parameter is not specified. The vulnerable function is not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-11671

Affected Products

Uniweb/Solipacs Webserver

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11671 · Security Note
• https://twcert.org.tw/en/cp-139-10420-d1a4f-2.html · Note
• https://t.me/CVEtracker/34762 · Telegram Post
• https://twcert.org.tw/tw/cp-132-10419-de614-1.html · Note
• https://t.me/cveNotify/138435 · Telegram Post