CVE-2025-63004 is a Missing Authorization vulnerability (CWE-862) affecting Skynet Technologies USA LLC All in One Accessibility plugin versions up to and including 1.15, which allows for the exploitation of incorrectly configured access control security levels. Rated 4.3 MEDIUM, this vulnerability has a low attack complexity and requires low privileges, allowing an unauthenticated attacker to achieve low integrity impact over a network without user interaction. The Exploit Prediction Scoring System (EPSS) score is very low at 0.00039, and its FAUCET Risk Score is 24.0/100, indicating a low probability of exploitation and overall risk. There is currently no evidence of active exploitation, nor are there any public exploit modules available on platforms like Metasploit, Nuclei, or ExploitDB, and it is not listed on CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Skynet Technologies USA LLC | All In One Accessibility | >= 0, <= 1.15CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.