PT-2025-43533
CVE-2025-34156
·
Published
2025-10-23
·
Updated
2026-10-23
Description by
CVSS 4.0
6.9
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Tibbo AggreGate Network Manager versions prior to 6.40.05
Description
The software reveals sensitive system information through an unauthenticated endpoint. Specifically, the
/cwmp/happyaxis.jsp endpoint allows unauthorized access to Java system properties, server path details, and version information. This information disclosure could potentially assist in further compromise of the system.Recommendations
Update Tibbo AggreGate Network Manager to version 6.40.05 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾