9.3
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.
Basic Information
ID
CVE-2025-54942
Source
ZUSO ART
Published
Aug 30, 2025 at 03:37
Affected Product
Vendor
SUNNET Technology Co., Ltd.
Product
Corporate Training Management System
Affected Versions
SUNNET Technology Co., Ltd. Corporate Training Management System 0