CVE-2025-34121

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263.

CVSS

No CVSS.

References

Link	Resource
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/uptime_file_upload_1.rb
https://web.archive.org/web/20150210113937/http://www.security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf
https://www.exploit-db.com/exploits/38732
https://www.vulncheck.com/advisories/idera-uptime-arbitrary-file-upload-rce

Configurations

No configuration.

History

17 Jul 2025, 21:15

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de carga arbitraria de archivos no autenticados en las versiones de Idera Up.Time Monitoring Station hasta la 7.2 (incluida). El script `wizards/post2file.php` acepta parámetros POST arbitrarios, lo que permite a los atacantes cargar archivos PHP manipulados en la raíz web. Una explotación exitosa resulta en la ejecución remota de código como usuario del servidor web. NOTA: La omisión de esta vulnerabilidad se conoce como CVE-2015-9263.

16 Jul 2025, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-16 21:15

Updated : 2025-07-17 21:15

NVD link : CVE-2025-34121

Mitre link : CVE-2025-34121

CVE.ORG link : CVE-2025-34121

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2025-34121", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-07-16T21:15:27.100", "references": [{"url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/uptime_file_upload_1.rb", "source": "disclosure@vulncheck.com"}, {"url": "https://web.archive.org/web/20150210113937/http://www.security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/38732", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/idera-uptime-arbitrary-file-upload-rce", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263."}, {"lang": "es", "value": "Existe una vulnerabilidad de carga arbitraria de archivos no autenticados en las versiones de Idera Up.Time Monitoring Station hasta la 7.2 (incluida). El script `wizards/post2file.php` acepta par\u00e1metros POST arbitrarios, lo que permite a los atacantes cargar archivos PHP manipulados en la ra\u00edz web. Una explotaci\u00f3n exitosa resulta en la ejecuci\u00f3n remota de c\u00f3digo como usuario del servidor web. NOTA: La omisi\u00f3n de esta vulnerabilidad se conoce como CVE-2015-9263. "}], "lastModified": "2025-07-17T21:15:50.197", "sourceIdentifier": "disclosure@vulncheck.com"}