Files
vuln-nvd/data/2025/CVE-2025-0645.json
T

2 lines
2.1 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Pyxis Signage","vendor":"Narkom Communication and Software Technologies Trade Ltd. Co.","versions":[{"lessThanOrEqual":"31012025","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Pyxis Signage: through 31012025."},{"lang":"es","value":"Una vulnerabilidad de Carga Irrestricta de Archivo con Tipo Peligroso en Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage permite Acceder a Funcionalidades No Restringidas Adecuadamente por ACLs. Este problema afecta a Pyxis Signage: hasta el 31012025."}],"id":"CVE-2025-0645","lastModified":"2026-10-18T20:10:00.110","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0645","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-11-20T19:22:19.576518Z","version":"2.0.3"}}]},"published":"2025-11-20T15:17:21.977","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404"},{"source":"iletisim@usom.gov.tr","url":"https://www.usom.gov.tr/bildirim/tr-25-0404"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}