CVE-2025-7916
Simopro Technology｜WinMatrix3 - Insecure Deserialization
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jul 21, 2025
- Updated
- Jul 21, 2025
- Reserved
- Jul 21, 2025
Description
WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | twcert |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-502 Deserialization of Untrusted Data
Affected Products
| Product | Versions |
|---|---|
WinMatrix3Simopro Technology |
|
References
- https://www.twcert.org.tw/tw/cp-132-10256-14d55-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-10257-e88f3-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.