Platform
other
Component
information-portal
Fixed in
13.06.2025
CVE-2025-5243 is an Arbitrary File Access vulnerability, coupled with OS Command Injection, affecting the SMG Software Information Portal. This flaw allows attackers to upload files with dangerous types and execute arbitrary commands on the server, potentially leading to complete system compromise. The vulnerability impacts versions of the Information Portal prior to 13.06.2025. A patch is available in version 13.06.2025.
The impact of CVE-2025-5243 is severe. An attacker can exploit this vulnerability to upload a web shell, effectively gaining remote code execution (RCE) on the affected server. This allows for complete control over the system, including data exfiltration, modification, and further lateral movement within the network. The combination of arbitrary file access and OS command injection significantly expands the attack surface, enabling attackers to bypass security controls and escalate privileges. Successful exploitation could result in the theft of sensitive data, disruption of services, and potentially, the compromise of other systems connected to the network. The ability to upload and execute arbitrary code makes this a high-risk vulnerability, akin to the impact of vulnerabilities that allow for direct shell access.
CVE-2025-5243 was published on 2025-07-24. Severity is currently assessed as critical with a CVSS score of 10. Public proof-of-concept (POC) code is currently unknown, but the combination of arbitrary file access and OS command injection makes it highly likely that such exploits will emerge. The vulnerability is not currently listed on KEV or EPSS, but the high CVSS score suggests a medium to high probability of exploitation. Monitor security advisories and threat intelligence feeds for updates.
Exploit Status
EPSS
0.27% (50% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-5243 is to immediately upgrade the SMG Software Information Portal to version 13.06.2025 or later. If upgrading is not immediately feasible, consider implementing temporary workarounds. These may include restricting file upload types to only explicitly allowed formats, implementing strict input validation on all user-supplied data, and configuring a Web Application Firewall (WAF) to block suspicious file uploads and command execution attempts. Review and harden server configurations to minimize the impact of potential code execution. Monitor system logs for unusual file activity or command execution patterns. After upgrading, verify the fix by attempting to upload a file with a known dangerous extension (e.g., .php, .asp) and confirming that the upload is blocked.
Actualice Information Portal a una versión posterior a 13.06.2025. Esto corrige las vulnerabilidades de carga de archivos arbitrarios e inyección de comandos del sistema operativo. Consulte el registro de cambios del proveedor para obtener más detalles sobre la actualización.
Vulnerability analysis and critical alerts directly to your inbox.
It's a critical vulnerability in SMG Software Information Portal allowing arbitrary file access and code injection, potentially leading to complete server compromise.
If you are using SMG Software Information Portal versions prior to 13.06.2025, you are vulnerable to this attack.
Upgrade to version 13.06.2025 or implement temporary workarounds like restricting file uploads and using a WAF.
While no public exploits are currently known, the high severity and potential impact suggest exploitation is likely.
Refer to the SMG Software security advisory and the NVD entry for CVE-2025-5243 for detailed information.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.