Unrestricted File Upload Vulnerability in Specto CM by Echo Call Center Services
CVE-2025-2155
8.8HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 24 December 2025
What is CVE-2025-2155?
The unrestricted file upload vulnerability in Specto CM, provided by Echo Call Center Services, allows unauthorized users to upload files of dangerous types. This flaw can lead to remote code inclusion, enabling attackers to execute malicious code on affected systems. It is critical for users of versions prior to 17032025 to assess their security posture and apply necessary updates to mitigate this risk.
Affected Version(s)
Specto CM 0 < 17032025
