vulnerability
Gladinet Centrestack: CVE-2025-12480: Improper Access Control
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:N/C:C/I:C/A:N) | Nov 10, 2025 | Nov 11, 2025 | Dec 18, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Nov 10, 2025
Added
Nov 11, 2025
Modified
Dec 18, 2025
Description
Centrestack versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.
Solution
gladinet-centrestack-update-latest
References
- CVE-2025-12480
- https://attackerkb.com/topics/CVE-2025-12480
- URL-https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md
- URL-https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480
- URL-https://attackerkb.com/topics/5C4wRy6hY7/cve-2025-12480/rapid7-analysis
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.