ByteOS Network

CVE Vulnerability Details :

CVE-2025-3621

PUBLISHED

More Info Official Page

Assigner-FSI

Assigner Org ID-09832df1-09c1-45b4-8a85-16c601d30feb

Published At-15 Jul, 2025 | 07:22

Updated At-15 Jul, 2025 | 13:30

▼CVE Numbering Authority (CNA)

Remote Code Execution in ProTNS ActADUR

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. * vulnerabilities: * Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard-coded Credentials * Improper Authentication * Binding to an Unrestricted IP Address The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.

Affected Products

Vendor

ProTNS

Product

ActADUR

Package Name

Local Server

Platforms

Windows

Default Status

unaffected

Versions

Affected

From v2.0.1.9 before v2.0.2.0 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-77	CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE	CWE-798	CWE-798 Use of Hard-coded Credentials
CWE	CWE-287	CWE-287 Improper Authentication
CWE	CWE-1327	CWE-1327 Binding to an Unrestricted IP Address

Metrics

Version	Base score	Base severity	Vector
4.0	9.4	CRITICAL	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
3.1	9.6	CRITICAL	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Impacts

CAPEC ID	Description
CAPEC-253	CAPEC-253 Remote Code Inclusion

Credits

finder

oriax(박기택, Park Kitaek)

References

Hyperlink	Resource
https://www.protns.com/53	N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References