Paper/Archive/CVE-2025-4555

CVE-2025-4555

ZONG YU Okcat Parking Management Platform — ZONG YU Okcat Parking Management Platform - Missing Authentication

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 48.7.487 × 209.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access system functions. These functions include opening gates, viewing license plates and parking records, and restarting the system.

Affected

ProductAffectedFixed inSource

Okcat Parking Management Platformall versions–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

twcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-10108-f77f5-1.html writeuptwcert.org.tw/en/cp-139-10109-25719-2.html