CNNVD-202512-1126 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1126
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
OpenBMCS是澳大利亚OpenBMCS公司的一个建筑管理和控制系统。 OpenBMCS 2.4版本存在安全漏洞，该漏洞源于update_user_permissions.php脚本存在权限操作问题，可能导致权限提升。
Description (English)
OpenBMCS is a building management and control system of OpenBMCS, Australia. OpenBMCS version 2.4 contains a security loophole, which stems from a power operation problem in the update user missions.php script, which may lead to an increase in privileges.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
OpenBMCS
Published
2025-12-09
Last Modified
2026-02-24
References
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5693.php https://www.exploit-db.com/exploits/50669 https://www.vulncheck.com/advisories/openbmcs-user-management-privilege-escalation https://access.redhat.com/security/cve/cve-2021-47701
Share on: