Arbitrary File Read Vulnerability in IQ-Support by IQ Service International
CVE-2025-13161

8.7HIGH

Key Information:

Vendor

Iq Service International

Status
Iq-support
Vendor
CVE Published:
14 November 2025

What is CVE-2025-13161?

The Arbitrary File Read vulnerability in IQ-Support by IQ Service International enables unauthenticated remote attackers to exploit relative path traversal. This could allow attackers to access and download sensitive system files which should not be publicly accessible, leading to potential information leaks and further system compromises.

Affected Version(s)

IQ-Support 1.0

References

https://www.twcert.org.tw/en/cp-139-10502-11c6d-2.html
third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10501-a25a6-1.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-13161 : Arbitrary File Read Vulnerability in IQ-Support by IQ Service International