CVE-2025-0645

Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage

CVSS 7.2 HIGHEPSS 0.3%CWE-434

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 nov 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Pyxis Signage: through 31012025.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Narkom Communication and Software Technologies Trade Ltd. Co. · Pyxis Signage

Referencias

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404 https://www.usom.gov.tr/bildirim/tr-25-0404