CVE-2025-3424
HIGH EPSS 13.2%
Published Apr 7, 20251y ago · Modified Jun 17, 20262w ago
7.7 CVSS 4.0
Published Apr 7, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the "Object Marshalling" technique, which allows an attacker to read internal files without any authentication. This is possible by crafting specific .NET Remoting URLs derived from information enumerated in the client-side configuration files. This issue affects IntelliSpace Portal: 12 and prior.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Green Attack Vector Adjacent
Attack Complexity High
Privileges Required None
User Interaction None
Scope P
Threat Intelligence
EPSS Exploit Probability
13.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-22 Path Traversal Resource Mgmt
References 2
- cve.org https://www.cve.org/CVERecord?id=CVE-2025-3424
- philips.com https://www.philips.com/a-w/security/security-advisories.html#security_advisories
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.