Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CVE-2025-1645: Benner Connecta 1.0.5330: Unsecured File Editing Allows Remote Exploit

CVE-2025-1645 · published 1 year ago
Summary

A critical security issue in Benner Connecta 1.0.5330 allows attackers to remotely manipulate sensitive data. This could potentially lead to unauthorized access or data corruption. We recommend updating to the latest version of Benner Connecta as soon as possible.

Original advisory text
A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulatio...
A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulation of the argument Handle leads to improper control of resource identifiers. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-99Improper Control of Resource Identifiers ('Resource Injection')
Timeline
Published25 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-1645 · NVD
Track software like this
Free during beta