{"id":9750,"date":"2025-08-05T10:38:40","date_gmt":"2025-08-05T10:38:40","guid":{"rendered":"http:\/\/localhost\/?p=9750"},"modified":"2025-08-05T10:38:40","modified_gmt":"2025-08-05T10:38:40","slug":"ictbroadcast-unauthenticated-session-cookie-remote-code-execution","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9750","title":{"rendered":"ICTBroadcast Unauthenticated Session Cookie Remote Code Execution"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nICTBroadcast Unauthenticated Session Cookie Remote Code Execution<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-05T15:00:32.531Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-05T15:00:32.531Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nICT Innovations<\/td>\n<\/tr>\n
Product<\/th>\nICTBroadcast<\/td>\n<\/tr>\n
Version<\/th>\n0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n9.3 (CRITICAL)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:N\/VC:H\/VI:L\/VA:L\/SC:H\/SI:H\/SA:H<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe ICTBroadcast application is vulnerable to remote code execution due to unsafe handling of session cookies. Attackers can inject shell commands, leading to server exploitation. Versions 7.4 and below are affected.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
AI Vendor<\/th>\nICT Innovations<\/td>\n<\/tr>\n
AI Product<\/th>\nICTBroadcast<\/td>\n<\/tr>\n
AI Version<\/th>\n7.4 and below<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n