PT-2025-47948 · Xtooltech · Xtool Anyscan

Published 2025-11-24 · Updated 2025-11-24 · CVE-2025-63434

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xtooltech Xtool AnyScan Android Application versions prior to 4.40.40

Description The application’s update process is flawed because it downloads and extracts update packages with executable code without verifying their integrity or authenticity. An attacker controlling the update metadata could deliver a malicious package that the application accepts, extracts, and executes, potentially resulting in arbitrary code execution.

Recommendations Update to version 4.40.40 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2025-63434

Affected Products

Xtool Anyscan

References · 7

• 🔥 https://github.com/ab3lson/cve-references/tree/master/CVE-2025-63434 · Exploit
• 🔥 https://nowsecure.com/blog/2025/07/16/remote-code-execution-discovered-in-xtool-anyscan-app-risks-to-phones-and-vehicles · Exploit
• https://osv.dev/vulnerability/CVE-2025-63434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63434 · Security Note
• https://twitter.com/VulmonFeeds/status/1993094680486023437 · Twitter Post
• https://twitter.com/CVEnew/status/1993005727892619358 · Twitter Post
• https://t.me/CVEtracker/38101 · Telegram Post