CVE-2025-4536 Gosuncn Technology Group Audio-Visual Integrated Management Platform listByPage information disclosure
Remote attackers can access sensitive user information via the listByPage endpoint in the Gosuncn Audio-Visual Integrated Management Platform.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-4536?
CVE-2025-4536 is a medium-severity vulnerability in Gosuncn Technology Group Audio-Visual Integrated Management Platform, published on 11 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Which versions are affected by CVE-2025-4536?
It affects 1 product.
Products include Gosuncntech Group Audio-Visual Integrated Management.
How do I fix CVE-2025-4536?
No fix has been published for CVE-2025-4536 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-4536 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-4536 exists.
Other vulnerabilities in Gosuncn Technology Group Audio-Visual Integrated Management Platform
Sources
Also known as GHSA-ppx3-hhf8-j3gg.