CVE-2025-5871

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-287CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-587108.8Incorrect Privilege Assignment vulnerability in e-plugins Hotel Listing hotel-listing allows Privilege Escalation.This issue affects Hotel LCVE-2025-587115.3Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained byCVE-2025-587126.4A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with CVE-2025-587136.4A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd CVE-2025-587147.8Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2025-587158.8Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.CVE-2025-587168.8Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.CVE-2025-587174.3Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a networCVE-2025-587188.8Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2025-587194.7Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.CVE-2025-58725.3A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an unknown part of the CVE-2025-587207.8Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose inf