CVE-2025-11020: RCE in SafePC Enterprise

The impact of CVE-2025-11020 is significant due to the potential for Remote Code Execution. An attacker could first exploit the Path Traversal vulnerability to gain access to sensitive server information. Subsequently, they could leverage SQL Injection to manipulate database contents, potentially extracting credentials or modifying critical data. The Unrestricted Upload of File with Dangerous Type vulnerability then allows the attacker to upload malicious files, such as web shells or malware, which can be executed on the server, granting them complete control. This could lead to data breaches, system compromise, and disruption of services. The combination of these vulnerabilities creates a high-risk scenario for organizations using SafePC Enterprise.

1. Reserved2025-09-26
2. Published2025-10-02
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-11020 is to upgrade SafePC Enterprise to version 7.0.1 or later. If upgrading immediately is not feasible, consider implementing temporary workarounds. Restrict file upload locations and types to prevent the upload of dangerous files. Implement strict input validation and sanitization to prevent SQL Injection attacks. Consider using a Web Application Firewall (WAF) to filter malicious traffic and block attempts to exploit the Path Traversal vulnerability. After upgrading, confirm the fix by attempting to trigger the Path Traversal vulnerability and verifying that access is denied.