CVE-2025-11908
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the uploadFile function in /FileDir.do?Action=Upload is vulnerable to unrestricted file upload via manipulation of the File argument. The attack can be carried out remotely, and the exploit has been released to the public.
Risk Assessment
A remote attacker can upload malicious files to the server, potentially leading to code execution, system compromise, or other damage.
Recommendation
Update Streamax Crocus to a patched version or implement restrictions on file types and sizes for uploads.
Other vulnerabilities in Streamax Crocus
See all- CVE-2025-11914Medium
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /DeviceFileReport.do?Action=Download is affected. Manipulation of the FilePath argument results in path traversal. The attack may be initiated remotely and the exploit has been made public.
- CVE-2025-11913Medium
A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /Service.do?Action=Download is affected. Manipulation of the Path argument leads to path traversal. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-11912Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-11911Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceFault.do?Action=Query is vulnerable to SQL injection via manipulation of the sortField argument. The attack can be launched remotely, and the exploit is now public.
- CVE-2025-11910Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /MemoryState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2025-11909Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the queryLast function in /RepairRecord.do?Action=QueryLast is vulnerable to SQL injection via manipulation of the orderField argument. The attack may be performed remotely, and the exploit has been made public.
Original NVD description (English source)
A security flaw has been discovered in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The affected element is the function uploadFile of the file /FileDir.do?Action=Upload. Performing manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS