CVE-2025-9401

Katalog CVE

CVSS 3.7 · Low EPSS 0,43%

Kerentanan Incorrect Comparison pada utcms project utcms. Skor CVSS 3.1 3.7 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The attack can be executed remotely. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

25 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-697: Incorrect Comparison

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.321237 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.632536 advisory pihak ketiga · vdb entry
• https://github.com/August829/Yu/blob/main/20250811_2.md broken link
• https://github.com/August829/Yu/blob/main/20250811_2.md#poc broken link
• https://vuldb.com/?ctiid.321237 permissions required · vdb entry