Vulnerability · Published Sep 3, 2025 · Assigned by VulDB
CVE-2025-9842Das Parking Management System 停车场管理系统 Search information disclosure
Medium 5.3
In plain English
A medium-severity information exposure in Parking Management System 停车场管理系统 from Das. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 56.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Das | Parking Management System 停车场管理系统 | 6.2.0 |
Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-322189 | Das Parking Management System 停车场管理系统 Search information disclosure vdb-entry
- VDB-322189 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #641783 | Das Parking Management System 6.2.0 Sensitive Data Exposure third-party-advisory
- https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/dasiot.md exploit