CVE-2025-31144

MEDIUM Year: 2025
CVSS v3 Score
5.8
Medium
Weakness Type
CWE-923
View all →

Vulnerability Description

Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running.

Related Vulnerabilities

CVE-2022-2837

MEDIUM
CVSS:6.1(Medium)

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match th...

CWE-9232022

CVE-2022-38125

MEDIUM
CVSS:5.5(Medium)

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

CWE-9232022

CVE-2024-47125

HIGH
CVSS:5.4(Medium)

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption p...

CWE-9232024

CVE-2021-32004

MEDIUM
CVSS:5.3(Medium)

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

CWE-9232021

CVE-2022-2663

MEDIUM
CVSS:5.3(Medium)

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using un...

CWE-9232022

CVE-2023-29108

MEDIUM
CVSS:5.3(Medium)

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend appl...

CWE-9232023