CVE-2025-2916

Name of the Vulnerable Software and Affected Versions Aishida Call Center System versions up to 20250314

Description A critical issue has been found in the Aishida Call Center System, affecting some unknown processing of the file /doscall/weixin/open/amr2mp3. The manipulation of the File argument leads to command injection. The attack may be initiated remotely.

Recommendations For Aishida Call Center System versions up to 20250314, as a temporary workaround, consider restricting access to the /doscall/weixin/open/amr2mp3 file to minimize the risk of exploitation. Avoid using the File argument in the affected processing until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.