PT-2025-44460 · Anheng · Mingyu Operations/Maintenance Audit/Risk Control System

Published 2025-10-30 · Updated 2025-10-30 · CVE-2023-7325

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Anheng Mingyu Operation and Maintenance Audit and Risk Control System versions prior to 2023-08-10

Description The software contains a server-side request forgery (SSRF) issue in the xmlrpc.sock handler. The system is susceptible to specially crafted XML-RPC requests that can force the server to connect to internal unix socket RPC endpoints and execute privileged XML-RPC methods. Successful exploitation allows an attacker to invoke administrative RPC methods through the unix socket interface, potentially creating arbitrary user accounts on the system and leading to account creation and possible takeover of the host. This issue has been observed being exploited in the wild as of 2025-10-30. The vulnerability allows attackers to create arbitrary user accounts. The vulnerable component is the xmlrpc.sock handler.

Recommendations Versions prior to 2023-08-10 should be updated. As a temporary workaround, consider restricting access to the xmlrpc.sock handler to minimize the risk of exploitation.

Exploit

Fix

Missing Authentication

SSRF

Weakness Enumeration

CWE-306

CWE-918

Related Identifiers

CVE-2023-7325

Affected Products

Mingyu Operations/Maintenance Audit/Risk Control System

References · 6

• 🔥 https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/%E5%AE%89%E6%81%92/%E5%AE%89%E6%81%92%20%E6%98%8E%E5%BE%A1%E8%BF%90%E7%BB%B4%E5%AE%A1%E8%AE%A1%E4%B8%8E%E9%A3%8E%E9%99%A9%E6%8E%A7%E5%88%B6%E7%B3%BB%E7%BB%9F%20xmlrpc.sock%20%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E6%B7%BB%E5%8A%A0%E6%BC%8F%E6%B4%9E.md · Exploit
• 🔥 https://cn-sec.com/archives/1947658.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7325 · Security Note
• https://twitter.com/CVEnew/status/1984012731779830092 · Twitter Post
• https://vulncheck.com/advisories/mingyu-operations-and-maintenance-audit-and-risk-control-system-xmirpc-sock-ssrf · Note
• https://twitter.com/0dayPublishing/status/1984008541489791019 · Twitter Post