Back to all
2025-08-30

SUNNET Corporate Training Management System - Missing Authentication for Critical Function

ZUSOART ID
ZA-2025-10
CVE ID
CVE-2025-54942
Vulnerability Type
CWE-306: Missing Authentication for Critical Function
CVSS 4.0 Base
9
Description

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Vendor
SUNNET Technology Co., Ltd.
Product
Category
Version affected
Corporate Training Management System
Before 10.11
Mitigations

Contact SUNNET Technology for version updates.

Release date
2025-08-30
Credit

Cheng Ming Yang (TW1943) of ZUSO ART