CVE-2025-3425
HIGH EPSS 21.6%
Published Apr 7, 20251y ago · Modified Jun 17, 20262w ago
7.3 CVSS 4.0
Published Apr 7, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the deserialization vulnerability. After analyzing the configuration files, we observed that the server had set the TypeFilterLevel to Full which is dangerous as it can potentially lead to remote code execution using deserialization. This issue affects IntelliSpace Portal: 12 and prior.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Green Attack Vector Adjacent
Attack Complexity High
Privileges Required None
User Interaction A
Scope P
Threat Intelligence
EPSS Exploit Probability
21.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-502 Deserialization of Untrusted Data Validation
References 2
- cve.org https://www.cve.org/CVERecord?id=CVE-2025-3425
- philips.com https://www.philips.com/a-w/security/security-advisories.html#security_advisories
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.