PT-2025-3904

CVE-2025-0471

·

Published

2025-01-16

·

Updated

2025-01-18

Description by

CVSS 3.1
9.9
Critical
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PMB platform versions 4.0.10 and above
Description The issue is related to an unrestricted file upload vulnerability. This could allow an attacker to upload a file and gain remote access to the machine, enabling them to access, modify, and execute commands freely.
Recommendations For versions 4.0.10 and above, update to a newer version that contains a fix for this issue to secure your system. As a temporary workaround, consider restricting file upload capabilities until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾