CNNVD-202512-4998 Information

CNNVD ID

CNNVD-202512-4998

CVE-2025-15225

  • CNNVD Published: 2025-12-29

Description (Chinese)

SUNNET WMPro是中国台湾旭联科技(SUNNET)公司的一套线上学习平台。 SUNNET WMPro存在安全漏洞,该漏洞源于存在任意文件读取漏洞,可能导致未经验证的远程攻击者利用相对路径遍历读取任意系统文件。

Description (English)

SUNNET WMPro is an online learning platform for SUNNET. SUNNET WMPro has a security loophole, which stems from the existence of any file reading loophole, which may lead uncertified remote assailants to read any system file through a relative path.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

旭联科技

Published

2025-12-29

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10603-67149-2.html https://www.twcert.org.tw/tw/cp-132-10602-c1c69-1.html

Share on: