Skip to content
OpenAdvisories
Critical · 9.6 CVE-2025-3621 EUVD-2025-21419GHSA-655x-v2mw-gj38

Remote Code Execution in ProTNS ActADUR

Published Jul 15, 2025 · Updated Jul 15, 2025 · Assigned by FSI

Description

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. 

* vulnerabilities:
*

Improper Neutralization of Special Elements used in a Command ('Command Injection')
* Use of Hard-coded Credentials
* Improper Authentication
* Binding to an Unrestricted IP Address

The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.

Affected products

VendorProductAffectedFixed
ProTNS ActADUR v2.0.1.9 – < v2.0.2.0 v2.0.2.0

References