Vulnerability · Published Sep 3, 2025 · Assigned by VulDB
CVE-2025-9843Das Parking Management System 停车场管理系统 FindAll information disclosure
Medium 5.3
In plain English
A medium-severity information exposure in Parking Management System 停车场管理系统 from Das. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 56.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Operator/FindAll. This manipulation causes information disclosure. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Das | Parking Management System 停车场管理系统 | 6.2.0 |
Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-322190 | Das Parking Management System 停车场管理系统 FindAll information disclosure vdb-entry
- VDB-322190 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #644854 | Das Parking Management System 6.2.0 Sensitive Data Exposure third-party-advisory
- https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/Parking.md exploit