CVE-2025-11910
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /MemoryState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit SQL injection to gain unauthorized access to data, potentially leading to information disclosure or modification.
Recommendation
Update Streamax Crocus to a patched version or implement mitigations such as using prepared statements.
Other vulnerabilities in Streamax Crocus
See all- CVE-2025-11914Medium
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /DeviceFileReport.do?Action=Download is affected. Manipulation of the FilePath argument results in path traversal. The attack may be initiated remotely and the exploit has been made public.
- CVE-2025-11913Medium
A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The Download function of the file /Service.do?Action=Download is affected. Manipulation of the Path argument leads to path traversal. The attack can be launched remotely and the exploit has been disclosed to the public.
- CVE-2025-11912Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceState.do?Action=Query is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-11911Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the Query function in /DeviceFault.do?Action=Query is vulnerable to SQL injection via manipulation of the sortField argument. The attack can be launched remotely, and the exploit is now public.
- CVE-2025-11909Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the queryLast function in /RepairRecord.do?Action=QueryLast is vulnerable to SQL injection via manipulation of the orderField argument. The attack may be performed remotely, and the exploit has been made public.
- CVE-2025-11908Medium
In Shenzhen Ruiming Technology Streamax Crocus 1.3.40, the uploadFile function in /FileDir.do?Action=Upload is vulnerable to unrestricted file upload via manipulation of the File argument. The attack can be carried out remotely, and the exploit has been released to the public.
Original NVD description (English source)
A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This affects the function Query of the file /MemoryState.do?Action=Query. The manipulation of the argument orderField leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS