CVE-2025-4535
Gosuncn Technology Group Audio-Visual Integrated Management Platform Configuration File config.properties information disclosure
- State
- Published
- Severity
- 6.9 Medium
- Published
- May 11, 2025
- Updated
- May 12, 2025
- Reserved
- May 10, 2025
Description
A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:P/I:N/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Audio-Visual Integrated Management PlatformGosuncn Technology Group |
|
References
- VDB-308280 | Gosuncn Technology Group Audio-Visual Integrated Management Platform Configuration File config.properties information disclosurevdb-entry
- VDB-308280 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #566424 | Gosuncn Technology Group Co., Ltd. Audio-Visual Integrated Management Platform V4.0 Improper Access Controlsthird-party-advisory
- https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.