CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack 및 Triofox 전체 Poc/Exploit 요약 이 취약점은 Gladinet CentreStack 및 Triofox 제품의 하드코딩된 암호화 키로 인해 발생하며, 위조된 액세스 티켓을 통한 임의 파일 읽기가 가능합니다. AES-256 암호화 구현은 애플리케이션 바이너리GladCtrl64.dll에 직접 내장된 정적이고 변경되지 않는 키를 사용합니다. 이 키를 추출한 공격자는 다음을 수행할 수 있습니다. 1. 합법적인 액세스 티켓을 복호화하여 내부 파일 경로 및 시스템 구성을...

Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

CVE-2025-11371

CVE-2025-11371 개요 이 저장소는 Gladinet CentreStack 및 TrioFox의 인증되지 않은 로컬 파일 포함LFI 취약점인 CVE-2025-11371에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 익스플로잇은 Web.config와 같은 민감한 시스템 파일을 원격으로 검색할 수 있으며, 이를 통해 머신 키가 노출되어 CVE-2025-30406과 같은 역직렬화 결함을 통한 추가 RCE로 이어질 수 있습니다. 영향을 받는 버전: 16.7.10368.56560을 포함한 모든 버전. 요구 사항 Python...

CVE-2025-11371

CVE-2025-11371 Gladinet CentreStack 및 TrioFox의 기본 설치 및 구성에서 인증되지 않은 로컬 파일 포함Local File Inclusion 취약점으로 인해 시스템 파일이 의도치 않게 노출될 수 있습니다. 이 취약점의 악용 사례가 실제 환경에서 관찰되었습니다. 이 문제는 16.7.10368.56560을 포함한 모든 이전 버전의 Gladinet CentreStack 및 Triofox에 영향을 미칩니다. 이 탐지 방법은 어떻게 작동하나요? 이 탐지 스크립트는 CentreStack 로그인 페이지에 G...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

Exploit for Use of Hard-coded Credentials in Gladinet Centrestack

CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Su...

Gladinet CentreStack < 16.4.10315.56368 Insecure Deserialization

According to its banner, the version of Gladinet CentreStack running on the remote host is prior to 16.4.10315.56368. It is, therefore, affected by an Insecure Deserialization due to the CentreStack portal's use an hardcoded machineKey. Note that the scanner has not tested for these issues but ha...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-14611link is external Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability CVE-2025-43529link is external Apple Multiple Products...

CVE-2025-14611

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted...

CVE-2025-14611

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted...

CVE-2025-14611

CVE-2025-14611 affects Gladinet CentreStack and Triofox prior to 16.12.10420.56791. The root cause is hardcoded, static keys/IVs used by the AES cryptosystem (AES-256-CBC) in the web services, enabling attackers to forge or decrypt access tickets and potentially trigger arbitrary local file inclu...

CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted...

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in versions prior to Gladinet CentreStack 16.12.10420.56791, which stems from the use of hard-coded values in the AES encryption schem...

CVE-2025-14611: Use of Hard-coded Credentials

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted...

VulnCheck KEV: CVE-2025-14611

Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially...

Gladinet CentreStack/Triofox Access Ticket Forge

This module forges access tickets for the Gladinet CentreStack/Triofox /storage/filesvr.dn endpoint. The vulnerability exists because the application uses hardcoded cryptographic keys in GladCtrl64.dll to encrypt/decrypt access tickets. The access ticket is an encrypted string that contains: -...

Gladinet CentreStack/Triofox < 16.10.10408.56683 Local File Inclusion

Gladinet CentreStack/Triofox versions prior to 16.10.10408.56683 are vulnerable to a Local File Inclusion LFI vulnerability. An unauthenticated attacker could exploit this issue to read arbitrary files on the affected system, potentially leading to information disclosure. The vulnerability exists...

Gladinet CentreStack <= 16.7.10368.56560 Local File Inclusion

Gladinet CentreStack through 16.7.10368.56560 fixed in 16.10.10408.56683 contain an unauthenticated Local File I nclusion LFI vulnerability CVE-2025-11371 that allows an attacker to read sensitive files notably Web.config without authentication; attackers observed exploiting this in the wild have...

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two security flaws impacting Gladinet and Control Web Panel CWP to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below ...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11371link is external Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability CVE-2025-48703link is external CWP...