PT-2025-26769 · Aleris · Kaleris Navis N4 Ulc

CVE-2025-2566

·

Publicado

2025-06-24

·

Atualizado

2025-06-25

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Kaleris NAVIS N4 ULC (affected versions not specified)
Description: The issue concerns an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2025-14637
CVE-2025-2566

Produtos afetados

Kaleris Navis N4 Ulc