CVE-2025-2819
Last modified
CVE-2025-2819 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-2819?
How severe is CVE-2025-2819?
How do I fix CVE-2025-2819?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-28169BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13…8.1
- CVE-2025-2817Thunderbird's update mechanism allowed a medium-integrity us…8.8
- CVE-2025-28170Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to In…7.6
- CVE-2025-28171An issue in Grandstream UCM6510 v.1.0.20.52 and before allow…6.5
- CVE-2025-28172Grandstream Networks UCM6510 v1.0.20.52 and before is vulner…6.5
- CVE-2025-2818A vulnerability was reported in version 1.0 of the Bluetooth…5.1
- CVE-2025-28197Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_…9.1
- CVE-2025-28198A SQL injection vulnerability in Hitout car sale 1.0 allows …5.9
- CVE-2025-2820An authenticated attacker can compromise the availability of…6.5
- CVE-2025-28200Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utiliz…9.8
- CVE-2025-28201An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physi…6.8
- CVE-2025-28202Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110…8.8
Are you affected by CVE-2025-2819?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST