CVE-2025-11909
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the queryLast function in /RepairRecord.do?Action=QueryLast is vulnerable to SQL injection via manipulation of the orderField argument. The attack may be performed remotely, and the exploit has been made public.
Risk Assessment
A remote attacker can exploit SQL injection to gain unauthorized access to data, potentially leading to data security breaches.
Recommendation
Update Streamax Crocus to the latest version or apply mitigations such as input validation.
Other vulnerabilities in Streamax Crocus
See all- CVE-2025-11914Medium
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /DeviceFileReport.do?Action=Download is affected. Manipulation of the FilePath argument results in path traversal. The attack may be initiated remotely and the exploit has been made public.
- CVE-2025-11913Medium
A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /Service.do?Action=Download is affected. Manipulation of the Path argument leads to path traversal. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-11912Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-11911Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceFault.do?Action=Query is vulnerable to SQL injection via manipulation of the sortField argument. The attack can be launched remotely, and the exploit is now public.
- CVE-2025-11910Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /MemoryState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2025-11908Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the uploadFile function in /FileDir.do?Action=Upload is vulnerable to unrestricted file upload via manipulation of the File argument. The attack can be carried out remotely, and the exploit has been released to the public.
Original NVD description (English source)
A weakness has been identified in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The impacted element is the function queryLast of the file /RepairRecord.do?Action=QueryLast. Executing manipulation of the argument orderField can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS