CNNVD-202510-2621 Information

CNNVD ID

CNNVD-202510-2621

CVE-2025-8884

  • CNNVD Published: 2025-10-20

Description (Chinese)

VHS Elektronik ACE Center是土耳其VHS Elektronik公司的一款基于Web的能源监控平台。 VHS Elektronik ACE Center 3.10.100.1768版本至3.10.161.2255之前版本存在安全漏洞,该漏洞源于用户控制密钥导致授权绕过,可能导致权限滥用和信任标识符利用。

Description (English)

VHS Elektronik ACE Center is a Web-based energy monitoring platform for VHS Elektronik in Turkey. VHS Elektronik ACE Center 3.10.100.1768 to 3.10.161.255 contains a security loophole, which stems from the user control key leading to the circumvention of the authorization, which may lead to abuse of authority and the use of the trust identifier.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

VHS Elektronik

Published

2025-10-20

Last Modified

2026-02-24

References

https://www.usom.gov.tr/bildirim/tr-25-0348

Patch

https://www.vhselektronik.com.tr/

Share on: