CVE-2025-4636

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user

Score

CVSS 3.1 7.8 High

Status

Deferred - cve_disclosure@tech.gov.sg

Published

2025-05-30

Last modified

2025-05-30

Weaknesses

CWE-269

Affected products

• Airpointer (Jct)

References

• https://jct-aq.com/products/airpointer2d/