CVE-2025-3425: Unauthenticated Remote Code Execution via .NET Deserialization
First published: Mon Apr 07 2025(Updated: )
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the deserialization vulnerability. After analyzing the configuration files, we observed that the server had set the TypeFilterLevel to Full which is dangerous as it can potentially lead to remote code execution using deserialization. This issue affects IntelliSpace Portal: 12 and prior.
Credit: 20705f08-db8b-4497-8f94-7eea62317651
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Philips IntelliSpace Portal | <12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-3425?
CVE-2025-3425 has been rated as a high severity vulnerability due to its potential for remote code execution.
How can I mitigate CVE-2025-3425?
To mitigate CVE-2025-3425, ensure that the TypeFilterLevel is properly configured and review settings on port 755.
What systems are affected by CVE-2025-3425?
CVE-2025-3425 affects the Philips IntelliSpace Portal application up to version 12.
What is the nature of the vulnerability in CVE-2025-3425?
CVE-2025-3425 is a deserialization vulnerability exploited via .NET Remoting.
Are there any known exploits for CVE-2025-3425?
Yes, there are known exploits for CVE-2025-3425 that target the deserialization flaw in the IntelliSpace Portal.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-api
- source/NVD
- vendor/philips
- canonical/philips intellispace portal