CVEvulnerability
CVE-2025-31932
8.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-502
Description
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console.
The vendor provides the workaround information and recommends to apply it to the deployment environment.
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness
References
- https://jvn.jp/en/jp/JVN30641875/ jvn.jp
- https://knowledge.bizrobo.com/hc/ja/articles/360029772271 knowledge.bizrobo.com
- https://knowledge.bizrobo.com/hc/ja/articles/39951710517145 knowledge.bizrobo.com
- https://knowledge.bizrobo.com/hc/ja/articles/39952052043289 knowledge.bizrobo.com
- https://knowledge.bizrobo.com/hc/ja/articles/39953373809305 knowledge.bizrobo.com