Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-44177

Quick assessment

Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

White Star Software Protop是美国White Star Software公司的一个监控工具。 White Star Software Protop 4.4.2-2024-11-27版本存在安全漏洞，该漏洞源于/pt3upd/端点存在目录遍历，可能导致任意文件读取。

AI Predicted 7.5 Difficulty: Easy EPSS 4.17% · P90

Public Exploits 2

ExploitDB · 1 EDB-52367 [webapps]
Nuclei · 1 CVE-2025-44177.yaml [template]

Possible ATT&CK Techniques 1 AI

T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-44177

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
White Star Software Protop 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
White Star Software Protop是美国White Star Software公司的一个监控工具。 White Star Software Protop 4.4.2-2024-11-27版本存在安全漏洞，该漏洞源于/pt3upd/端点存在目录遍历，可能导致任意文件读取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-44177

# POC Description Source Link Shenlong Link
1 A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44177.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-44177

请登录查看更多情报信息。

Same Patch Batch · n/a · 2025-07-09 · 9 CVEs total

CVE-2025-7207 3.3 LOW mruby nregs codegen.c scope_new heap-based overflow
CVE-2025-49604 Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d 安全漏洞
CVE-2025-44525 Texas Instruments CC2652RB LaunchPad SimpleLink 安全漏洞
CVE-2025-44526 Realtek RTL8762EKF-EVB RTL8762E SDK 安全漏洞
CVE-2025-53645 Zimbra Collaboration Suite 安全漏洞
CVE-2025-52364 Tenda CP3 Pro 安全漏洞
CVE-2025-52357 C-Data FD602GW-DX-R410 Fiber Router 安全漏洞
CVE-2021-27961 Evasys 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-44177

No comments yet

Leave a comment