Paper/Archive/CVE-2025-54943

CVE-2025-54943

SUNNET Technology Co., Ltd. Corporate Training Management System — SUNNET Corporate Training Management System - Missing Authorization

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 42.5.425 × 208.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

Affected

ProductAffectedFixed inSource

Corporate Training Management System< 10.1110.11CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ZUSO ART (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupzuso.ai/advisory/za-2025-11