CNNVD-202509-140 Information

CNNVD ID

CNNVD-202509-140

CVE-2025-6685

  • CNNVD Published: 2025-09-02

Description (Chinese)

ATEN eco DC是中国宏正自动(ATEN)公司的一款数据中心基础设施管理软件。 ATEN eco DC存在安全漏洞,该漏洞源于授权缺失,可能导致权限提升。

Description (English)

ATEN eco DC is a data centre infrastructure management software for the Chinese company ATEN. There is a security gap in ATEN eco DC, which stems from the absence of a mandate, which may lead to an increase in authority.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

宏正自动科技

Published

2025-09-02

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-650/ https://www.aten.com/global/en/supportcenter/info/security-advisory/25/ https://nvd.nist.gov/vuln/detail/CVE-2025-6685

Patch

https://www.aten.com/global/en/supportcenter/info/security-advisory/25/

Share on: