Paper/Archive/CVE-2025-5192

CVE-2025-5192

Soar Cloud System CO., LTD. HRD Human Resource Management System — Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 43.7.437 × 208.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

Affected

ProductAffectedFixed inSource

HRD Human Resource Management System≤ 7.3.2025.0408–CNA

Scores by source

ZUSO ART (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupzuso.ai/advisory/za-2025-04