CVE-2025-4536

A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS

No CVSS.

References
Link Resource
https://vuldb.com/?ctiid.308281 Permissions Required VDB Entry
https://vuldb.com/?id.308281 Third Party Advisory VDB Entry
https://vuldb.com/?submit.566425 Third Party Advisory VDB Entry
https://wiki.shikangsi.com/post/share/ab0b0245-dc38-4b27-80e8-bc61de83692c Exploit Third Party Advisory
https://wiki.shikangsi.com/post/share/ab0b0245-dc38-4b27-80e8-bc61de83692c Exploit Third Party Advisory
https://vuldb.com/?submit.566425 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:gosuncntech:group_audio-visual_integrated_management:1.0:*:*:*:*:*:*:*

History

08 Jul 2025, 16:59

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.308281 - () https://vuldb.com/?ctiid.308281 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.308281 - () https://vuldb.com/?id.308281 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.566425 - () https://vuldb.com/?submit.566425 - Third Party Advisory, VDB Entry
References () https://wiki.shikangsi.com/post/share/ab0b0245-dc38-4b27-80e8-bc61de83692c - () https://wiki.shikangsi.com/post/share/ab0b0245-dc38-4b27-80e8-bc61de83692c - Exploit, Third Party Advisory
CPE cpe:2.3:a:gosuncntech:group_audio-visual_integrated_management:1.0:*:*:*:*:*:*:*
First Time Gosuncntech group Audio-visual Integrated Management
Gosuncntech

12 May 2025, 15:16

Type Values Removed Values Added
CWE CWE-284
CWE-200
References () https://vuldb.com/?submit.566425 - () https://vuldb.com/?submit.566425 -
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : unknown

11 May 2025, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-11 09:15

Updated : 2025-07-08 16:59


NVD link : CVE-2025-4536

Mitre link : CVE-2025-4536


JSON object : View

Products Affected

gosuncntech

  • group_audio-visual_integrated_management
CWE

No CWE.