Vulnerability · Published Mar 10, 2025 · Assigned by VulDB
CVE-2025-2147Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System file access
Medium 5.3
In plain English
A medium-severity security flaw in Modern Farm Digital Integrated Management System from Beijing Zhide Intelligent Internet Technology. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Official description
A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Beijing Zhide Intelligent Internet Technology | Modern Farm Digital Integrated Management System | 1.0 |
Weakness: CWE-552, CWE-425 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- VDB-299058 | Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System file access vdb-entry
- VDB-299058 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #506593 | 北京植得智能互联科技有限公司 瑞田现代农场数字化综合管理系统 v1.0 Exposure of Information Through Directory Listing third-party-advisory
- https://github.com/fubxx/CVE/blob/main/%E7%91%9E%E7%94%B0%E7%8E%B0%E4%BB%A3%E5%86%9C%E5%9C%BA%E6%95%B0%E5%AD%97%E5%8C%96%E7%BB%BC%E5%90%88%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86.md exploit