CVE-2025-0425

Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions ("nt authority\system"). By changing the server address to a malicious server, or a script simulating a server, the user is able to escalate his privileges by abusing certain features of the "bestinformed Web" server. Those features include: * Pushing of malicious update packages * Arbitrary Registry Read as "nt authority\system" An attacker is able to escalate his privileges to "nt authority\system" on the Windows client running the "bestinformed Infoclient".  This attack is not possible if a custom configuration ("Infoclient.ini") containing the flags "ShowOnTaskbar=false" or "DisabledItems=stPort,stAddress" is deployed.

• CWE-15

• https://www.cordaware.com/changelog/en/version-6_3_8_1.html

Published

Feb 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0419Improper Neutralization of Input During Web Page Generation …4.7
• CVE-2025-0420Improper Neutralization of Input During Web Page Generation …4.7
• CVE-2025-0421Improper Restriction of Rendered UI Layers or Frames vulnera…4.7
• CVE-2025-0422An authenticated user in the "bestinformed Web" application …8.6
• CVE-2025-0423In the "bestinformed Web" application, some user input was n…5.3
• CVE-2025-0424In the "bestinformed Web" application, some user input was n…5.1
• CVE-2025-0426A security issue was discovered in Kubernetes where a large …6.2
• CVE-2025-0427Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel D…7.8
• CVE-2025-0428The "AI Power: Complete AI Pack" plugin for WordPress is vul…7.2
• CVE-2025-0429The "AI Power: Complete AI Pack" plugin for WordPress is vul…7.2
• CVE-2025-0430Belledonne Communications Linphone-Desktop is vulnerable t…8.7
• CVE-2025-0431Enterprise Protection contains a vulnerability in URL rewrit…5.8