{"id":"CVE-2025-7875","state":"PUBLISHED","title":"Metasoft 美特软件 MetaCRM debug.jsp improper authentication","description":"A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2025-07-20T07:14:05.444Z","updatedAt":"2025-07-21T17:03:03.085Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Metasoft 美特软件 MetaCRM"],"affected":[{"vendor":"Metasoft 美特软件","product":"MetaCRM","versions":[{"version":"6.4.0","status":"affected"},{"version":"6.4.1","status":"affected"},{"version":"6.4.2","status":"affected"}]}],"references":["https://vuldb.com/?id.316989","https://vuldb.com/?ctiid.316989","https://github.com/FightingLzn9/vul/blob/main/MetaCRM6-SIL-2.md"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/7xxx/CVE-2025-7875.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-7875","state":"PUBLISHED","datePublished":"2025-07-20T07:14:05.444Z","dateUpdated":"2025-07-21T17:03:03.085Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-07-19T07:15:33.752Z"},"containers":{"cna":{"title":"Metasoft 美特软件 MetaCRM debug.jsp improper authentication","descriptions":[{"lang":"en","value":"A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Es wurde eine Schwachstelle in Metasoft 美特软件 MetaCRM bis 6.4.2 entdeckt. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /debug.jsp. Mit der Manipulation mit unbekannten Daten kann eine improper authentication-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"Metasoft 美特软件","product":"MetaCRM","versions":[{"version":"6.4.0","status":"affected"},{"version":"6.4.1","status":"affected"},{"version":"6.4.2","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.316989","name":"VDB-316989 | Metasoft 美特软件 MetaCRM debug.jsp improper authentication","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.316989","name":"VDB-316989 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://github.com/FightingLzn9/vul/blob/main/MetaCRM6-SIL-2.md","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","type":"CWE","lang":"en","description":"Improper Authentication"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-07-20T07:14:05.444Z"},"timeline":[{"time":"2025-07-19T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-07-19T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-07-19T09:20:56.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://github.com/FightingLzn9/vul/blob/main/MetaCRM6-SIL-2.md","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-21T17:03:00.567733Z","id":"CVE-2025-7875","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-21T17:03:03.085Z"}}]}}}