CVE-2025-2566

Deserialization of Untrusted Data in Kaleris Navis N4 PUBLISHED

Description (CNA)

Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server.

Affected (CNA)

Vendor / product	Versions
Kaleris / Navis N4	affected 0 before 4.0

CWE

CWE-502

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.