Security Advisory

CVE-2025-40625

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-06 10:43:01

Last updated 2025-05-07 06:41:41

Assigner INCIBE

CVSS score 9.3

State PUBLISHED

Description

Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).

← Browse all CVEs View on cve.org ↗