---
cve: "CVE-2025-5192"
severity: "CRITICAL"
cvss: 9.3
epss: "0.5%"
vendor: "Soar Cloud System Co., Ltd."
kev: false
exploited: false
published: "2025-06-06 09:15:17"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-10T14:07:38+02:00"
---

# CVE-2025-5192

> 9.3 CRITICAL

## Beschreibung

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **yes**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Referenzen

- <https://zuso.ai/advisory/za-2025-04>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-5192/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_