CVE Catalog

CVE-2025-61937

Critical
Published: Translated: NVD NIST

Summary

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server.

Risk Assessment

Complete compromise of the model application server can lead to data confidentiality breaches, service disruption, and further attacks on the infrastructure.

Recommendation

Apply patches provided by the software vendor and restrict access to the 'taoimr' service to trusted networks only.

Original NVD description (English source)

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the  model application server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS