CYRISMA Sensor Insecure Permissions & DLL Hijacking Vulnerabilities (CVE-2025-57624/57625)

Critical Vulnerability Information 1. Insecure Folder and File Permissions (CVE-2025-57624) Affected Versions: CYRISMA Sensor Version < 2.5 Description: The installation directory and files of CYRISMA Sensor have improper permission settings, allowing low-privileged users (such as ) to modify critical files. Risk: Attackers can exploit this vulnerability to replace or modify critical files such as , thereby executing arbitrary code on the system. Example: - The directory and its contents are writable by . - Attackers can achieve privilege escalation by replacing . 2. DLL Hijacking (CVE-2025-57625) Affected Versions: CYRISMA Sensor Version < 2.5 Description: CYRISMA Agent loads specific DLL files at startup without properly validating their paths or sources. Risk: Attackers can place malicious DLL files in the directory; when the Agent attempts to load these DLLs, the malicious code will be executed. Example: - Attackers can create a malicious file named in the directory. - When the Agent starts, it will load and execute this malicious DLL, leading to code execution. Disclosure Timeline Discovery Date: 2023-04-05 Internal Fix Response: 2023-04-06 Official Response: 2023-04-08 Public Disclosure: 2023-04-10 ``` This summary outlines the key details of two critical vulnerabilities, including affected versions, descriptions, risks, and potential exploitation methods by attackers.

Goal Reached Thanks to every supporter — we hit 100%!

CYRISMA Sensor Insecure Permissions & DLL Hijacking Vulnerabilities (CVE-2025-57624/57625)