Paper/Archive/CVE-2025-4557

CVE-2025-4557

ZONG YU Parking Management System — ZONG YU Parking Management System - Missing Authentication

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 45.4.454 × 209.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The specific APIs of Parking Management System from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific APIs and operate system functions. These functions include opening gates and restarting the system.

Affected

ProductAffectedFixed inSource

Parking Management Systemall versions–CNA

Scores by source

twcert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

twcert (CNA)8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-10112-5de7e-1.html writeuptwcert.org.tw/en/cp-139-10113-58c29-2.html