Skip to content
OpenAdvisories
High · 7.7 CVE-2025-3424 EUVD-2025-10702GHSA-hg9x-8q33-pg7f

3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel

Published Apr 7, 2025 · Updated Apr 10, 2025 · Assigned by Philips

Description

The IntelliSpace portal application utilizes .NET
Remoting for its functionality. The vulnerability arises from the exploitation
of port 755 through the "Object Marshalling" technique, which allows
an attacker to read internal files without any authentication. This is possible
by crafting specific .NET Remoting URLs derived from information enumerated in
the client-side configuration files.

This issue affects IntelliSpace Portal: 12 and prior.

Affected products

VendorProductAffectedFixed
Philips IntelliSpace Portal 12 and prior —

References