CVE-2025-3983

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 77
CWE ID 74

Summary

CVE-2025-3983 is a critical vulnerability affecting the AMTT Hotel Broadband Operation System 1.0. This issue lies in the unknown functionality of the file /manager/system/nlog_down.php, where manipulation of the ProtocolType argument leads to command injection. The attack can be executed remotely, and the exploit has been made public. Other parameters may also be susceptible to manipulation. Despite early disclosure to the vendor, they have not responded with any remediation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Hotel Broadband Operation System

Affected Vendors

  • AMTT

Advisories, Assessments, and Mitigations