« Volver al listado

CVE-2025-0001

Estado: AplazadaMedia (6.5)—

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Abacus — ERPAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-0001",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-0001",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-18T17:20:34.965879Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "vulnerability@ncsc.ch",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "vulnerability@ncsc.ch",
      "affectedData": [
        {
          "vendor": "Abacus Research AG",
          "product": "Abacus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2024.210.16036",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2023.205.15833",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2022.205.15542",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-02-17T10:15:08.550",
  "references": [
    {
      "url": "https://borelenzo.github.io/stuff/2025/02/15/CVE-2025-0001.html",
      "source": "vulnerability@ncsc.ch"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vulnerability@ncsc.ch",
      "description": [
        {
          "lang": "en",
          "value": "CWE-36"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability."
    },
    {
      "lang": "es",
      "value": "Las versiones de Abacus ERP anteriores a 2024.210.16036, 2023.205.15833 y 2022.105.15542 están afectadas por una vulnerabilidad de lectura arbitraria de archivos autenticados."
    }
  ],
  "lastModified": "2026-06-17T08:25:40.180",
  "sourceIdentifier": "vulnerability@ncsc.ch"
}