CVE-2025-8769

Summary

Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an attacker can inject arbitrary Perl code through a crafted HTTP request, leading to remote code execution on the server.

Affected Software

Weaknesses

• CWE-20: CWE-20

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://megasys.com/support/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-04
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2024/icsa-24-263-04.json

• ←Previous
• Next→