CVE-2025-15422: EmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism
A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15422?
The severity of CVE-2025-15422 is considered high due to its potential for a remote attack and the impact on the protection mechanisms of the application.
How do I fix CVE-2025-15422?
To fix CVE-2025-15422, update EmpireSoft EmpireCMS to version 8.1 or later, where the vulnerability has been addressed.
What component is affected by CVE-2025-15422?
CVE-2025-15422 affects the IP Address Handler component in the connection file e/class/connect.php.
Can CVE-2025-15422 be exploited remotely?
Yes, CVE-2025-15422 can be exploited remotely, allowing attackers to manipulate the system without direct access.
What is the impact of CVE-2025-15422?
The impact of CVE-2025-15422 includes a failure of protection mechanisms, potentially exposing sensitive data and system integrity.