{"id":38721,"date":"2025-05-16T19:13:12","date_gmt":"2025-05-16T19:13:12","guid":{"rendered":""},"modified":"2025-06-09T23:30:52","modified_gmt":"2025-06-10T05:30:52","slug":"cve-2025-4556-arbitrary-file-upload-vulnerability-in-okcat-parking-management-platform","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4556-arbitrary-file-upload-vulnerability-in-okcat-parking-management-platform\/","title":{"rendered":"CVE-2025-4556: Arbitrary File Upload Vulnerability in Okcat Parking Management Platform<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A newly identified vulnerability, CVE-2025-4556, is currently wreaking havoc in the cyber world. This vulnerability targets the web management interface of the Okcat Parking Management Platform developed by ZONG YU. The issue at hand is an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute<\/a> web shell backdoors. As a result, these attackers can execute arbitrary code<\/a> on the server, which has far-reaching implications for the security and integrity of the data stored there. Any organization using this platform is at risk, making this a wide-scale problem that needs immediate attention.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4556
\nSeverity: Critical (9.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n