{"id":"CVE-2025-14014","state":"PUBLISHED","title":"Insecure File Upload in NTN Informatics' Smart Panel","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215.","publishedAt":"2026-02-12T13:58:36.574Z","updatedAt":"2026-06-04T06:30:46.119Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel"],"affected":[{"vendor":"NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co.","product":"Smart Panel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"20251215","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-26-0064","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0064"],"weaknesses":["CWE-434"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/14xxx/CVE-2025-14014.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-14014","state":"PUBLISHED","datePublished":"2026-02-12T13:58:36.574Z","dateUpdated":"2026-06-04T06:30:46.119Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-12-04T11:32:05.214Z"},"containers":{"cna":{"title":"Insecure File Upload in NTN Informatics' Smart Panel","descriptions":[{"lang":"en","value":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215."}],"affected":[{"vendor":"NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co.","product":"Smart Panel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"20251215","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0064","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0064","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","lang":"en","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-04T06:30:46.119Z"},"datePublic":"2026-02-12T13:53:00.000Z","impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"credits":[{"lang":"en","value":"Anonim","type":"finder"}],"source":{"defect":["TR-26-0064"],"advisory":"TR-26-0064","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-12T14:42:31.555160Z","id":"CVE-2025-14014","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-12T14:43:01.751Z"}}]}}}