| TVN ID | TVN-202507007 |
|---|---|
| CVE ID | CVE-2025-7916 |
| CVSS | 9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Affected Products | WinMatrix AP version 3.8.52.5 and earlier |
| Description | WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents. |
| Solution | Update AP to version 3.8.52.5 (Web 1.2.39.5) and install the hotfix, or update AP to version 3.9.1 (Web 1.3.1) or later |
| Credit | Linwz(DEVCORE) |
| Public Date | 2025-07-21 |
:::