CVE-2025-3425CWE-502

Unauthenticated Remote Code Execution via .NET Deserialization

High · published April 7, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the deserialization vulnerability. After analyzing the configuration files, we observed that the server had set the TypeFilterLevel to Full which is dangerous as it can potentially lead to remote code execution using deserialization. This issue affects IntelliSpace Portal: 12 and prior.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Green
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-04-07T16:05Z
EPSS history
Timeline
  • 07 APR 16:05Z
    Unauthenticated Remote Code Execution via .NET Deserialization
    cvelistv5