---
cve: "CVE-2025-70833"
severity: "CRITICAL"
cvss: 9.4
epss: "0.5%"
vendor: "n/a"
kev: false
exploited: false
published: "2026-02-20 00:00:00"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-11-01T21:21:40+01:00"
---

# CVE-2025-70833

> 9.4 CRITICAL · 🧪 PoC

## Beschreibung

An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php.

## CNA-Record (Kanon, cvelistV5)

- CNA: **mitre**
- State: PUBLISHED
- Stand: 2026-02-23 18:36:57

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **poc**
  - Automatable: **yes**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Gering | warn |

## Schwachstellen-Klasse

- **CWE-287** — Improper Authentication
  When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
- **CWE-639** — Authorization Bypass Through User-Controlled Key
  The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

## Angriffsmuster (CAPEC)

- [CAPEC-22 — Exploiting Trust in Client](https://capec.mitre.org/data/definitions/22.html) _(Severity: High)_
- [CAPEC-57 — Utilizing REST's Trust in the System Resource to Obtain Sensitive Data](https://capec.mitre.org/data/definitions/57.html) _(Severity: Very High)_
- [CAPEC-114 — Authentication Abuse](https://capec.mitre.org/data/definitions/114.html) _(Severity: Medium)_
- [CAPEC-115 — Authentication Bypass](https://capec.mitre.org/data/definitions/115.html) _(Severity: Medium)_
- [CAPEC-151 — Identity Spoofing](https://capec.mitre.org/data/definitions/151.html) _(Severity: Medium)_
- [CAPEC-194 — Fake the Source of Data](https://capec.mitre.org/data/definitions/194.html) _(Severity: Medium)_
- [CAPEC-593 — Session Hijacking](https://capec.mitre.org/data/definitions/593.html) _(Severity: Very High)_
- [CAPEC-633 — Token Impersonation](https://capec.mitre.org/data/definitions/633.html) _(Severity: Medium)_

## ATT&CK-Techniken

- [T1040 — Network Sniffing](https://attack.mitre.org/techniques/T1040/)
- [T1548 — Abuse Elevation Control Mechanism](https://attack.mitre.org/techniques/T1548/)
- [T1185 — Browser Session Hijacking](https://attack.mitre.org/techniques/T1185/)
- [T1550.001 — Use Alternate Authentication Material:Application Access Tok](https://attack.mitre.org/techniques/T1550/001/)
- [T1563 — Remote Service Session Hijacking](https://attack.mitre.org/techniques/T1563/)
- [T1134 — Access Token Manipulation](https://attack.mitre.org/techniques/T1134/)

## Referenzen

- <https://github.com/LX-66-LX/cve/issues/4>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-70833/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_