CVE-2025-31932

Published: Apr 11, 2025Modified: Jun 17, 2026Deferred

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: vultures@jpcert.or.jp (Secondary)

Description

Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment.

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (5)

https://jvn.jp/en/jp/JVN30641875/

Source: vultures@jpcert.or.jp

https://knowledge.bizrobo.com/hc/ja/articles/360029772271

Source: vultures@jpcert.or.jp

https://knowledge.bizrobo.com/hc/ja/articles/39951710517145

Source: vultures@jpcert.or.jp

https://knowledge.bizrobo.com/hc/ja/articles/39952052043289

Source: vultures@jpcert.or.jp

https://knowledge.bizrobo.com/hc/ja/articles/39953373809305

Source: vultures@jpcert.or.jp

Timeline

No history available yet.