A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.308280 | Permissions Required VDB Entry |
| https://vuldb.com/?id.308280 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.566424 | Third Party Advisory VDB Entry |
| https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8 | Exploit Third Party Advisory |
| https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Jul 2025, 16:57
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gosuncntech group Audio-visual Integrated Management
Gosuncntech |
|
| CPE | cpe:2.3:a:gosuncntech:group_audio-visual_integrated_management:4.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.308280 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.308280 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.566424 - Third Party Advisory, VDB Entry | |
| References | () https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8 - Exploit, Third Party Advisory |
12 May 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
11 May 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-11 08:15
Updated : 2025-07-08 16:57
NVD link : CVE-2025-4535
Mitre link : CVE-2025-4535
JSON object : View
Products Affected
gosuncntech
- group_audio-visual_integrated_management
CWE
No CWE.
