CVE-2025-5243 is a critical vulnerability affecting SMG Software Information Portal versions prior to 13.06.2025, allowing for unrestricted file uploads of dangerous types and OS command injection. This flaw enables attackers to achieve code injection, upload web shells, and include malicious code, posing a severe risk to the affected systems. With a CVSS score of 10.0, it is easily exploitable over the network without authentication or user interaction, leading to complete compromise of confidentiality, integrity, and availability. Currently, there is no public exploit code available, and it has not been observed in active exploitation, with minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| SMG Software | Information Portal | >= 0, < 13.06.2025CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.