PT-2025-53295 · Specto Cm · Specto Cm

Berk İmran · Published 2025-12-24 · Updated 2025-12-24 · CVE-2025-2155

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Specto CM versions prior to 17032025

Description Specto CM is susceptible to a flaw involving unrestricted file uploads, potentially leading to Remote Code Inclusion. The issue stems from the ability to upload files without proper restrictions on their type. This could allow an attacker to upload a malicious file and execute arbitrary code on the system.

Recommendations Update Specto CM to a version released on or after 17032025.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-2155

Affected Products

Specto Cm

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-2155 · Security Note
• https://twitter.com/TheHackerWire/status/2003854055563559391 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0480 · Note
• https://twitter.com/CveFindCom/status/2003852883389719014 · Twitter Post
• https://t.me/CVEtracker/40607 · Telegram Post
• https://twitter.com/CVEnew/status/2003932325562732971 · Twitter Post
• https://twitter.com/RedPacketSec/status/2003921719354929431 · Twitter Post