Unrestricted File Upload Vulnerability in Specto CM by Echo Call Center Services
CVE-2025-2155

8.8HIGH

What is CVE-2025-2155?

The unrestricted file upload vulnerability in Specto CM, provided by Echo Call Center Services, allows unauthorized users to upload files of dangerous types. This flaw can lead to remote code inclusion, enabling attackers to execute malicious code on affected systems. It is critical for users of versions prior to 17032025 to assess their security posture and apply necessary updates to mitigate this risk.

Affected Version(s)

Specto CM 0 < 17032025

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Saadet Elif TOKUOÄžLU
Berk İMRAN
.
CVE-2025-2155 : Unrestricted File Upload Vulnerability in Specto CM by Echo Call Center Services