CVE-2025-31144

Medium CVSS: 6.9

Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running.

Vendor

Product

CWE

CWE-923

Yayın Tarihi

2025-04-28 00:15:15

Güncelleme

2025-04-29 13:52:10

Source Identifier

vultures@jpcert.or.jp

KEV Date Added

Kategoriler

CWE-923 MEDIUM 2025

Referanslar

https://jvn.jp/en/jp/JVN82536398/ https://mfp-support.sios.jp/hc/ja/articles/45853460006937 https://siosapps.sios.jp/agent_info/20250425001.html