PT-2025-48408 · Nutzam · Nutzboot

Sh7Err03 · Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-13804

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions nutzam NutzBoot versions up to 2.6.0-SNAPSHOT

Description A security flaw exists in nutzam NutzBoot. The issue resides in an unknown function within the EthModule.java file of the Ethereum Wallet Handler component. Manipulation of this component can lead to information disclosure, and the attack can be initiated remotely. The exploit for this issue is publicly available.

Recommendations Versions prior to 2.6.0-SNAPSHOT should be used.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2025-13804

Affected Products

Nutzboot

References · 7

• 🔥 https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13804 · Security Note
• https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md · Note
• https://vuldb.com/?ctiid.333814 · Note
• https://vuldb.com/?submit.692050 · Note
• https://t.me/CVEtracker/38504 · Telegram Post
• https://vuldb.com/?id.333814 · Note