Paper/Archive/CVE-2025-54942

CVE-2025-54942

SUNNET Technology Co., Ltd. Corporate Training Management System — SUNNET Corporate Training Management System - Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 41.0.410 × 208.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Affected

ProductAffectedFixed inSource

Corporate Training Management System< 10.1110.11CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ZUSO ART (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupzuso.ai/advisory/za-2025-10