CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-48744: In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

6.4 CVSS

Description

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

Classification

CVE ID: CVE-2025-48744

CVSS Base Severity: MEDIUM

CVSS Base Score: 6.4

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Problem Types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Vendor: SIGB

Product: PMB

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.15% (probability of being exploited)

EPSS Percentile: 36.27% (scored less or equal to compared to others)

EPSS Date: 2025-06-18 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-48744
https://www.sigb.net/index.php?lvl=cmspage&pageid=6&id_rubrique=553&opac_view=1
https://forge.sigb.net/projects/pmb/wiki/Changelog_801#CHANGE-LOG-8012-2025-03-03

Timeline