CNNVD-202510-3207 Information
CNNVD ID
CNNVD-202510-3207
Related CVE
- CNNVD Published: 2025-10-23
Description (Chinese)
BAE Systems SOCET GXP是美国BAE Systems公司的一款高端地理信息影像分析与测绘软件。 BAE Systems SOCET GXP 4.6.0.2之前版本存在安全漏洞，该漏洞源于未对文件路径进行清理，可能导致目录遍历攻击和敏感文件读取。
Description (English)
BAE Systems SOCET GXP is a high-end geographic information image analysis and mapping software for BAE Systems, United States. The previous version of BAE Systems SOCET GXP 4.6.0.2 had a security loophole, which stemmed from the failure to clear the file path, which could lead to a catalogue attack and sensitive document reading.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
BAE Systems
Published
2025-10-23
Last Modified
2026-02-24
References
https://www.baesystems.com/en-us/product/geospatial-exploitation-products https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54963 https://access.redhat.com/security/cve/cve-2025-54963