CVE-2025-3621 — Remote Code Execution in ProTNS ActADUR

CVE-2025-3621

Remote Code Execution in ProTNS ActADUR PUBLISHED

Description (CNA)

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. * vulnerabilities: * Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard-coded Credentials * Improper Authentication * Binding to an Unrestricted IP Address The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.

Affected (CNA)

Vendor / product	Versions
ProTNS / ActADUR	affected v2.0.1.9 before v2.0.2.0

CWE

CWE-77, CWE-798, CWE-287, CWE-1327

References

https://www.protns.com/53

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.