TVN ID	TVN-202511007
CVE ID	CVE-2025-13160, CVE-2025-13161
CVSS	CVE-2025-13160： 5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-13161： 7.5 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products	IQ-Support 1.0
Description	CVE-2025-13160(Exposure of Sensitive Information)： Unauthenticated remote attackers can access specific APIs to obtain sensitive information from the internal network. CVE-2025-13161(Arbitrary File Read)： Unauthenticated remote attackers can exploit Relative Path Traversal to download arbitrary system files.
Solution	Contact the vendor for updates.
Credit	Ruki Ren、PYu Lo(AAA Security Technology)
Public Date	2025-11-14