OpenText, Inc RightFax 在 Windows 64 位、32 位上的不可信数据反序列化漏洞允许对象注入。此问题影响 RightFax：通过 25.4。

CVE-2025-15610 影响 OpenText RightFax，原因是使用了包含已知漏洞的 .NET Remoting 框架。如果 RightFax 在远程端口可访问的环境中暴露，攻击者可能会利用这些漏洞。潜在影响包括远程代码执行，允许攻击者控制受影响的系统、访问机密信息或中断传真操作。此风险的严重程度取决于网络配置和已实施的安全措施。为了减轻此风险，必须将 RightFax 更新到 26.4.1 或更高版本。

Organizations utilizing RightFax in environments where the .NET Remoting ports are exposed to external networks are at significant risk. This includes deployments with weak firewall configurations, shared hosting environments, or legacy systems that have not been properly secured. Specifically, those using RightFax as a critical component for document management and communication are particularly vulnerable.

• windows / dotnet: Use PowerShell to check for running RightFax processes and their associated .NET Remoting ports.

Get-Process -Name RightFax | Select-Object ProcessName, Id, StartTime, Ports

• linux / server: Monitor system logs for unusual network connections to the .NET Remoting ports (typically 8080 or similar). Use ss or netstat to identify listening processes on these ports.

ss -tulnp | grep RightFax

• generic web: Check firewall rules to ensure that .NET Remoting ports are not exposed to the public internet. Use curl to attempt connections to these ports and verify that they are blocked.

curl -v <rightfax_server_ip>:8080

1. 2026-04-15Disclosure

   disclosure

1. 已保留2026-03-16
2. 发布日期2026-04-15
3. 修改日期2026-04-29
4. EPSS 更新日期2026-04-23

减轻 CVE-2025-15610 的主要解决方案是将 OpenText RightFax 更新到 26.4.1 或更高版本。此更新包含解决 .NET Remoting 框架中漏洞所需的修复程序。此外，建议限制对 RightFax 的远程端口的访问，从而限制服务对网络的暴露。实施防火墙和严格的访问规则可以帮助防止未经授权的访问。持续监控系统日志以查找可疑活动也是一种推荐的做法，可用于检测和响应潜在攻击。