CVE-2025-4740
BeamCtrl Airiana coef deserialization
- State
- Published
- Severity
- 4.8 Medium
- Published
- May 16, 2025
- Updated
- May 16, 2025
- Reserved
- May 15, 2025
Description
A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 4.3 Medium | AV:L/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
AirianaBeamCtrl |
|
References
- VDB-309040 | BeamCtrl Airiana coef deserializationvdb-entry
- VDB-309040 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #570888 | BeamCtrl Airiana 11.0 Insecure Deserializationthird-party-advisory
- https://github.com/BeamCtrl/Airiana/issues/42issue-tracking
- https://github.com/BeamCtrl/Airiana/issues/42#issue-3037828880exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.