PT-2025-53675 · Kings Information & Network · Kess Enterprise

Published 2025-12-29 · Updated 2025-12-31 · CVE-2025-15065

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kings Information & Network Co. KESS Enterprise versions prior to 25.9.19.Exe

Description A security issue exists in Kings Information & Network Co. KESS Enterprise on Windows that could allow an unauthorized actor to access sensitive information. The issue involves missing encryption of sensitive data and files or directories accessible to external parties. This could lead to privilege escalation, modification of existing services, and modification of shared files.

Recommendations Update Kings Information & Network Co. KESS Enterprise to version 25.9.19.Exe or later.

Fix

LPE

Missing Encryption of Sensitive Data

Information Disclosure

Files Accessible to External Parties

Weakness Enumeration

CWE-311

CWE-200

CWE-552

Related Identifiers

CVE-2025-15065

Affected Products

Kess Enterprise

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-15065 · Security Note
• https://t.me/cveNotify/147283 · Telegram Post
• https://t.me/CVEtracker/40796 · Telegram Post
• https://kings.co.kr/solution/01/KESS.jsp?O=10.64&B=Chrome · Note
• https://twitter.com/CVEnew/status/2005479543566487893 · Twitter Post
• https://t.me/cveNotify/146999 · Telegram Post