PT-2025-48024 · Malion · Malion Security Point+1

Published 2025-11-25 · Updated 2025-11-25 · CVE-2025-62691

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MaLion Security Point (Windows) and MaLionCloud versions prior to 7.1.1.9

Description The software contains a stack-based buffer overflow vulnerability when processing HTTP headers. A remote, unauthenticated attacker could potentially exploit this issue by sending a specially crafted request. Successful exploitation may lead to arbitrary code execution with SYSTEM privileges.

Recommendations Update MaLion Security Point (Windows) and MaLionCloud to version 7.1.1.9 or later.

Fix

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-62691

Affected Products

Malion Security Point

Malioncloud

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-62691 · Security Note
• https://twitter.com/CveFindCom/status/1993238318390063404 · Twitter Post
• https://jvn.jp/en/jp/JVN76298784 · Note
• https://twitter.com/offseq/status/1993266353118056799 · Twitter Post
• https://t.me/CVEtracker/38188 · Telegram Post
• https://intercom.co.jp/information/2025/1125.html · Note
• https://twitter.com/CVEnew/status/1993225840109498556 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1993240599630078436 · Twitter Post