CVE-2025-43713

ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET remoting. These are Windows system services that support license key management and deprecated Windows network authentication. The services are implemented with .NET remoting and can be exploited via well-known deserialization techniques inherent in the technology. Because the services run with SYSTEM-level rights, exploits can be crafted to achieve escalation of privilege and arbitrary code execution. This affects DataGate for SQL Server 17.0.36.0 and 16.0.89.0, DataGate Component Suite 17.0.36.0 and 16.0.89.0, DataGate Monitor 17.0.26.0 and 16.0.65.0, DataGate WebPak 17.0.37.0 and 16.0.90.0, Monarch for .NET 11.4.50.0 and 10.0.62.0, Encore RPG 4.1.36.0, Visual RPG .NET FW 17.0.37.0 and 16.0.90.0, Visual RPG .NET FW Windows Deployment 17.0.36.0 and 16.0.89.0, WingsRPG 11.0.38.0 and 10.0.95.0, Mobile RPG 11.0.35.0 and 10.0.94.0, Monarch Framework for .NET FW 11.0.36.0 and 10.0.89.0, Browser Terminal 17.0.37.0 and 16.0.90.0, Visual RPG Classic 5.2.7.0 and 5.1.17.0, Visual RPG Deployment 5.2.7.0 and 5.1.17.0, and DataGate Studio 17.0.38.0 and 16.0.104.0.

• CWE-502

• https://asna.com
• https://www.asna.com/en/kb/security-update

Published

Jul 3, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43704Arctera/Veritas Data Insight before 7.1.2 can send cleartext…4.7
• CVE-2025-43706An issue was discovered in L2 in Samsung Mobile Processor, W…7.5
• CVE-2025-43708VisiCut 2.1 allows stack consumption via an XML document wit…7.5
• CVE-2025-4371A potential vulnerability was reported in the Lenovo 510 FHD…7
• CVE-2025-43711Tunnelblick 3.5beta06 before 7.0, when incompletely uninstal…8.1
• CVE-2025-43712JHipster before v.8.9.0 allows privilege escalation via a mo…2.9
• CVE-2025-43714The ChatGPT system through 2025-03-30 performs inline render…6.5
• CVE-2025-43715Nullsoft Scriptable Install System (NSIS) before 3.11 on Win…8.1
• CVE-2025-43716A directory traversal vulnerability exists in Ivanti LANDesk…5.8
• CVE-2025-43717In PEAR HTTP_Request2 before 2.7.0, multiple files in the te…5.4
• CVE-2025-43718Poppler 24.06.1 through 25.x before 25.04.0 allows stack con…2.9
• CVE-2025-4372Use after free in WebAudio in Google Chrome prior to 136.0.7…8.8