CVE-2025-10822
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed remotely. The exploit has been disclosed to the public and may be used.
Risk Assessment
Risk of unauthorized access to SMS logs, potentially leading to disclosure of sensitive information. A remote attack could compromise data confidentiality.
Recommendation
Apply vendor patches or restrict access to /sys/smslog/queryAll. Implement proper authorization controls for the SysSmsLogController function.
Other vulnerabilities in fuyang_lipengjun platform
See all- CVE-2025-10821Medium
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
- CVE-2025-10820Medium
A vulnerability was detected in fuyang_lipengjun platform 1.0. It impacts the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
- CVE-2025-10819Medium
A vulnerability was detected in the fuyang_lipengjun platform 1.0 in the UserCouponController function of /usercoupon/queryAll. Manipulation leads to improper authorization, and the attack can be performed remotely. The exploit has been publicly disclosed and may be used.
Original NVD description (English source)
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS