CVE-2023-7325

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery (SSRF) vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix socket RPC endpoints and perform privileged XML-RPC methods. An attacker able to send such requests can invoke administrative RPC methods via the unix socket interface to create arbitrary user accounts on the system, resulting in account creation and potential takeover of the bastion host. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-30 at 00:30:17.837319 UTC.

• CWE-306
• CWE-918

• https://cn-sec.com/archives/1947658.html
• https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/%E5%AE%89%E6%81%92/%E5%AE%89%E6%81%92%20%E6%98%8E%E5%BE%A1%E8%BF%90%E7%BB%B4%E5%AE%A1%E8%AE%A1%E4%B8%8E%E9%A3%8E%E9%99%A9%E6%8E%A7%E5%88%B6%E7%B3%BB%E7%BB%9F%20xmlrpc.sock%20%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E6%B7%BB%E5%8A%A0%E6%BC%8F%E6%B4%9E.md
• https://www.vulncheck.com/advisories/mingyu-operations-and-maintenance-audit-and-risk-control-system-xmirpc-sock-ssrf

Published

Oct 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7319Nagios Network Analyzer versions prior to 2024R1 are vulnera…5.4
• CVE-2023-7320The WooCommerce plugin for WordPress is vulnerable to Sensit…5.3
• CVE-2023-7321Nagios Log Server versions prior to 2.1.14 are vulnerable to…5.4
• CVE-2023-7322Nagios Log Server versions prior to 2024R1 contain an incorr…8.1
• CVE-2023-7323Nagios Log Server versions prior to 2024R1 are vulnerable to…5.4
• CVE-2023-7324In the Linux kernel, the following vulnerability has been re…8.1
• CVE-2023-7326The Epson Stylus SX510W embedded web management service fail…8.7
• CVE-2023-7327Ozeki SMS Gateway versions up to and including 10.3.208 cont…8.7
• CVE-2023-7328Screen SFT DAB 600/C firmware versions up to and including 1…5.3
• CVE-2023-7329Tinycontrol LAN Controller v3 (LK3) firmware versions up to …8.7
• CVE-2023-7330Ruijie NBR series routers contain an unauthenticated arbitra…9.3
• CVE-2023-7331A vulnerability was detected in PKrystian Full-Stack-Bank up…5.1