CVE-2025-30171CWE-863

Admin Authorized System File Deletion

High · published May 22, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

⚡ A compromised admin session can lead to a system-wide cleanup spree! Attackers can delete crucial files in ASPECT systems, leaving your setup in ruins. 🔥 Think of your system as a well-stocked library. If an untrustworthy librarian (the attacker) gets their hands on the master key (admin session), they could sneak in and remove any book they want, causing chaos in your carefully curated collections. If an attacker gains access to admin credentials, they could delete critical system files, potentially bringing your operations to a halt. This means data loss, service interruptions, and a massive headache for your IT team to restore everything. It’s an absolute nightmare waiting to happen!

Put simply

Think of your system as a well-stocked library. If an untrustworthy librarian (the attacker) gets their hands on the master key (admin session), they could sneak in and remove any book they want, causing chaos in your carefully curated collections. This vulnerability in ASPECT allows an attacker with compromised administrator session credentials to delete system files, effectively disrupting the system's functionality.

What to do

If an attacker gains access to admin credentials, they could delete critical system files, potentially bringing your operations to a halt. This means data loss, service interruptions, and a massive headache for your IT team to restore everything. It’s an absolute nightmare waiting to happen! To mitigate this issue, immediately review and strengthen your session management practices. Ensure that admin credentials are secured with strong passwords and consider implementing multi-factor authentication. It's crucial to update to the latest versions of ASPECT-Enterprise, NEXUS Series, and MATRIX Series to patch this vulnerability. You've got this! Follow these steps and you're on your way to securing your system like a pro! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/AU:N/R:U/V:C
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-05-22T17:41Z
EPSS history
Timeline
  • 22 MAY 17:41Z
    Admin Authorized System File Deletion
    cvelistv5