CNNVD-202512-1123 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1123
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
OpenBMCS是澳大利亚OpenBMCS公司的一个建筑管理和控制系统。 OpenBMCS 2.4版本存在代码问题漏洞，该漏洞源于ip参数存在服务端请求伪造问题，可能导致内部网络枚举和会话劫持。
Description (English)
OpenBMCS is a building management and control system of OpenBMCS, Australia. Version 2.4 of OpenBMCS has a code loophole, which stems from the problem of the ip parameter with a service-end request for forgery, which could lead to an internal cyber count and a session hijacking.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
OpenBMCS
Published
2025-12-09
Last Modified
2026-02-24
References
https://www.exploit-db.com/exploits/50670 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5694.php https://www.vulncheck.com/advisories/openbmcs-server-side-request-forgery-ssrf-via-phpqueryphp https://www.openbmcs.com https://access.redhat.com/security/cve/cve-2021-47703
Share on: