CVE-2025-4692

CVE-2025-4692 : Affects ABUP Cloud Update Platform (IoT cloud platform). A maliciously crafted JSON Web Token (JWT) can be submitted to a vulnerable cloud method to perform privilege escalation, allowing access to any device managed by the platform. Root cause: JWT-based privilege escalation via ...