CVE-2025-3621 Remote Code Execution in ProTNS ActADUR
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2025-3621?
CVE-2025-3621 is a critical vulnerability in ProTNS ActADUR, published on 15 Jul 2025.
Official description
Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems.
* vulnerabilities: *
Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard-coded Credentials * Improper Authentication * Binding to an Unrestricted IP Address
The vulnerability has been rated as critical.This issue affects ActADUR: from v2.0.1.9 before v2.0.2.0., hence updating to version v2.0.2.0. or above is required.
Which versions are affected by CVE-2025-3621?
How do I fix CVE-2025-3621?
No fix has been published for CVE-2025-3621 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-3621 being exploited?
There is no known exploitation of CVE-2025-3621 in the wild and no public exploit code.
Sources
Also known as GHSA-655x-v2mw-gj38.