CVE-2025-3621

Critical

Description

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. * vulnerabilities: * Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard-coded Credentials * Improper Authentication * Binding to an Unrestricted IP Address The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.

SeverityCritical

CVSS9.6

Exploit probability—

ProductActADUR

PublishedJul 15, 2025

First seenJul 15, 2025

Weakness typeCWE-77Command injection CWE-798Hard-coded credentials CWE-287Improper authentication CWE-1327CWE-1327

How to fix

Update

ProTNS ActADURv2.0.2.0 or later

Affected products

Product	Affected versions	Fixed in
ProTNS ActADUR	v2.0.1.9 ≤ v < v2.0.2.0	v2.0.2.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.