Lucene search
K

CVE-2025-6525

🗓️ 23 Jun 2025 21:31:05Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

Vulnerability CVE-2025-6525 in 70mai 1S allows improper authorization in Configuration Handler.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2025-6525
24 Jun 202500:59
circl
CNNVD
70mai 1S 安全漏洞
23 Jun 202500:00
cnnvd
Cvelist
CVE-2025-6525 70mai 1S Configuration Config.cgi improper authorization
23 Jun 202521:31
cvelist
EUVD
EUVD-2025-18957
3 Oct 202520:07
euvd
NVD
CVE-2025-6525
23 Jun 202522:15
nvd
Positive Technologies
PT-2025-26648 · 70Mai · 70Mai 1S
23 Jun 202500:00
ptsecurity
RedhatCVE
CVE-2025-6525
25 Jun 202521:56
redhatcve
Vulnrichment
CVE-2025-6525 70mai 1S Configuration Config.cgi improper authorization
23 Jun 202521:31
vulnrichment
Vulners
Node
70mai1sMatch20250611
[
  {
    "vendor": "70mai",
    "product": "1S",
    "versions": [
      {
        "version": "20250611",
        "status": "affected"
      }
    ],
    "modules": [
      "Configuration Handler"
    ]
  }
]
ParameterPositionPathDescriptionCWE
actionquery param/cgi-bin/Config.cgi?action=setImproper authorization on a local network accessible endpoint allowing manipulation via the action parameter.CWE-285CWE-266

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 10:02Current
4.7Medium risk
Vulners AI Score4.7
CVSS 23.3
CVSS 3.14.3
CVSS 45.3
CVSS 34.3
EPSS0.00236
SSVC
17