CVE-2025-2611

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are known to be vulnerable.

CVSS

No CVSS.

References

Link	Resource
https://github.com/rapid7/metasploit-framework/pull/20446
https://www.vulncheck.com/blog/ictbroadcast-kev

Configurations

No configuration.

History

15 Oct 2025, 14:15

Type	Values Removed	Values Added
Summary		(es) La aplicación ICTBroadcast transfiere de forma insegura los datos de las cookies de sesión al procesamiento del shell, lo que permite a un atacante inyectar comandos de shell en una cookie de sesión que se ejecutan en el servidor. Esto provoca la ejecución remota de código no autenticado en el procesamiento de la sesión. Las versiones 7.4 y anteriores son vulnerables.
References		() https://www.vulncheck.com/blog/ictbroadcast-kev -

05 Aug 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-05 15:15

Updated : 2025-10-15 14:15

NVD link : CVE-2025-2611

Mitre link : CVE-2025-2611

CVE.ORG link : CVE-2025-2611

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2025-2611", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-08-05T15:15:29.127", "references": [{"url": "https://github.com/rapid7/metasploit-framework/pull/20446", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/blog/ictbroadcast-kev", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling.\n\n\n\n\nVersions 7.4 and below are known to be vulnerable."}, {"lang": "es", "value": "La aplicaci\u00f3n ICTBroadcast transfiere de forma insegura los datos de las cookies de sesi\u00f3n al procesamiento del shell, lo que permite a un atacante inyectar comandos de shell en una cookie de sesi\u00f3n que se ejecutan en el servidor. Esto provoca la ejecuci\u00f3n remota de c\u00f3digo no autenticado en el procesamiento de la sesi\u00f3n. Las versiones 7.4 y anteriores son vulnerables."}], "lastModified": "2025-10-15T14:15:45.817", "sourceIdentifier": "disclosure@vulncheck.com"}