PT-2025-8688 · Sma · Www.Sunnyportal.Com

Francesco La Spina · Published 2025-02-26 · Updated 2025-05-14 · CVE-2025-0731

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-0731

Affected Products

Www.Sunnyportal.Com

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-0731 · Security Note
• https://twitter.com/syedaquib77/status/1903039204529168710 · Twitter Post
• https://twitter.com/syedaquib77/status/1912173975620428246 · Twitter Post
• https://twitter.com/syedaquib77/status/1905329804188287178 · Twitter Post
• https://twitter.com/syedaquib77/status/1903039169452183942 · Twitter Post
• https://twitter.com/dogeai_gov/status/1922726820606066729 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2025-012 · Note
• https://twitter.com/CVEnew/status/1894867680018211286 · Twitter Post