Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1336 CNY

100%

CVE-2025-2292 โ€” AI Deep Analysis Summary

CVSS 6.5 ยท Medium

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: Path Traversal in Xorcom CompletePBX. <br>๐Ÿ’ฅ **Consequences**: Attackers can read arbitrary files on the server. Critical data exposure risk.

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **CWE**: CWE-22 (Path Traversal). <br>๐Ÿ” **Flaw**: Improper restriction of file path access. Allows directory traversal sequences to escape intended directories.

Q3Who is affected? (Versions/Components)

๐Ÿข **Vendor**: Xorcom. <br>๐Ÿ“ฆ **Product**: CompletePBX. <br>๐Ÿ“… **Affected**: Version 5.2.35 and earlier. Newer versions are safe.

Q4What can hackers do? (Privileges/Data)

๐Ÿ•ต๏ธ **Action**: Read arbitrary system files. <br>๐Ÿ”“ **Privileges**: Requires Local Privileges (PR:L). <br>๐Ÿ“Š **Impact**: High Confidentiality (C:H), No Integrity/Availability impact.

Q5Is exploitation threshold high? (Auth/Config)

๐Ÿ”‘ **Auth**: YES. Requires Local Privileges. <br>๐ŸŒ **Network**: Network Accessible (AV:N). <br>โš ๏ธ **Threshold**: Medium. Not remote unauthenticated, but local network access is sufficient.

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿ’ฃ **Public Exp?**: No PoCs listed in data. <br>๐Ÿ“‰ **Wild Exp**: Low. Likely requires specific local access or crafted requests by authenticated users.

Q7How to self-check? (Features/Scanning)

๐Ÿ” **Check**: Scan for CompletePBX instances. <br>๐Ÿงช **Test**: Attempt path traversal payloads (`../`) if local access is granted. <br>๐Ÿ“‹ **Verify**: Check installed version against 5.2.35.

Q8Is it fixed officially? (Patch/Mitigation)

โœ… **Fixed**: YES. <br>๐Ÿ“ฅ **Patch**: Update to version 5.2.36.1. <br>๐Ÿ”— **Source**: Xorcom vendor advisory released March 2025.

Q9What if no patch? (Workaround)

๐Ÿ›ก๏ธ **Workaround**: Restrict network access to PBX. <br>๐Ÿšซ **Limit**: Ensure only trusted local users have access. <br>๐Ÿ‘€ **Monitor**: Log file access attempts closely.

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency**: HIGH. <br>โš–๏ธ **Reason**: CVSS 7.5 (High). Easy to exploit (AC:L) if local access exists. <br>๐Ÿš€ **Action**: Patch immediately to 5.2.36.1.