CVE-2025-7917CWE-434

Simopro Technology｜WinMatrix3 Web package - Arbitrary File Upload

High · published July 21, 2025

CVSS v4.0
8.6
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-07-21T06:08Z
EPSS history
Timeline
  • 21 JUL 06:08Z
    Simopro Technology｜WinMatrix3 Web package - Arbitrary File Upload
    cvelistv5