CVE-2025-25265 — Unauthenticated File Read via Web Interface
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the s…
Published: 2025-06-16 · CVSS: 4.9 · CVSS 3.1
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7