by Kastro
Paper/Archive/CVE-2025-14014

CVE-2025-14014

NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel — Insecure File Upload in NTN Informatics' Smart Panel

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.7.377 × 207.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Smart Panel: before 20251215.

Affected

ProductAffectedFixed inSource
Smart Panel< 2025121520251215CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-26-0064refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0064