CVE-2025-4555CWE-306

ZONG YU Okcat Parking Management Platform - Missing Authentication

Critical · published May 12, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

🚨 A missing authentication flaw in Okcat Parking Management Platform means anyone could waltz in and control the parking gates! 🔥 Think of it like having a hotel with an open back door—anyone could stroll in, view guest records, or even let themselves into restricted areas without anyone asking for a key. This vulnerability opens the floodgates for attackers to access sensitive functions: they can open parking gates, snoop on vehicle records, and even restart the entire system. This could lead to unauthorized access and chaos in parking management—imagine a free-for-all at a busy event!

Put simply

Think of it like having a hotel with an open back door—anyone could stroll in, view guest records, or even let themselves into restricted areas without anyone asking for a key. The flaw allows unauthenticated remote access to system functions due to missing authentication checks in the web management interface of the Okcat Parking Management Platform.

What to do

This vulnerability opens the floodgates for attackers to access sensitive functions: they can open parking gates, snoop on vehicle records, and even restart the entire system. This could lead to unauthorized access and chaos in parking management—imagine a free-for-all at a busy event! Patch the system immediately to the latest version provided by ZONG YU. Additionally, implement strict access controls and enable authentication for all management functions to safeguard against unauthorized access. Regularly audit your security settings to ensure compliance. You've got this! Take these steps and you’ll have the parking management system locked down in no time. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00599 · 48.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-05-12T02:02Z
EPSS history
Timeline
  • 12 MAY 02:02Z
    ZONG YU Okcat Parking Management Platform - Missing Authentication
    cvelistv5