This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-125297 | BDVDB-2026-404634 Detail

AsiaInfo InternationalBusiness Support System

Description#

AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function
  • CWE-862 Missing Authorization

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.