← Back

CVE-2025-12480

nvd nistnuclei
Published: Nov 10, 2025Modified: Nov 14, 2025CISA KEV

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: mandiant-cve@google.com (Secondary)

Description

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

Affected (1)

Products: Gladinet: Triofox
Gladinet
1 product
Triofox
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Triofox
Before 16.7.10368.56560

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (5)

Source: mandiant-cve@google.com
Release Notes
Source: mandiant-cve@google.com
ExploitThird Party Advisory
Source: mandiant-cve@google.com
Third Party Advisory
Source: mandiant-cve@google.com
Product
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.