SUNNET Corporate Training Management System – Missing Authorization_CVE-2025-54943

9.3 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

Basic Information

ID CVE-2025-54943

Source ZUSO ART

Published Aug 30, 2025 at 03:42

Affected Product

Vendor SUNNET Technology Co., Ltd.

Product Corporate Training Management System

Affected Versions SUNNET Technology Co., Ltd. Corporate Training Management System 0

CWE Classification

CWE-862

References

zuso.ai /advisory/

{
    "lastseen": "",
    "description": "A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.",
    "published": "2025-08-30T03:42:00.229Z",
    "modified": "2025-08-30T03:42:00.229Z",
    "type": "cve",
    "title": "SUNNET Corporate Training Management System - Missing Authorization",
    "source": "ZUSO ART",
    "references": "https://zuso.ai/advisory/",
    "id": "CVE-2025-54943",
    "bulletinFamily": "",
    "cwe": [
        "CWE-862"
    ],
    "cvelist": null,
    "sourceData": "SUNNET Technology Co., Ltd. Corporate Training Management System 0",
    "sourceHref": "",
    "cvss": {
        "score": 9.3,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Corporate Training Management System",
    "version": "0",
    "vendor": "SUNNET Technology Co., Ltd.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}