CVE-2025-7917 – Simopro Technology WinMatrix3 Arbitrary File Upload Vulnerability (Remote Code Execution)

The following table lists the changes that have been made to the
CVE-2025-7917 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • CVE Modified
    by [email protected]

    Jul. 21, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • New CVE Received
    by [email protected]

    Jul. 21, 2025

    Action Type Old Value New Value
    Added Description WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
    Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CWE CWE-434
    Added Reference https://www.twcert.org.tw/en/cp-139-10263-5f2e7-2.html
    Added Reference https://www.twcert.org.tw/tw/cp-132-10258-16bbf-1.html
Share the Post:

Related Posts