CVE-2025-28354

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 25, 2025
Updated: Apr 29, 2025
CWE ID 22

Summary

CVE-2025-28354 is a newly disclosed vulnerability affecting the Printer Manager Systm component of Entrust Corp's Printer Manager D3.18.4-3 and older versions. This issue enables attackers to execute directory traversal attacks through crafted POST requests. Successful exploitation could allow the attacker to read sensitive data or even gain unauthorized access to the affected system, posing a serious risk to organizations using this software. It is highly recommended that users immediately update to the latest version of Entrust Printer Manager to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share