Remote Code Execution Vulnerability in ICTBroadcast by ICTBroadcast
CVE-2025-2611

9.3CRITICAL

Key Information:

Vendor: Ict Innovations
Status: Ictbroadcast
Vendor: CVE Published:; 5 August 2025

🔔 Create Ict Innovations Vulnerability Alert

Badges

📈 Score: 1,490👾 Exploit Exists🟡 Public PoC📰 News Worthy

What is CVE-2025-2611?

CVE-2025-2611 is a severe remote code execution vulnerability found in the ICTBroadcast application developed by Ict Innovations. ICTBroadcast serves as a communications broadcasting tool designed to facilitate automated telephony services. The vulnerability arises from the application’s improper handling of session cookie data, which can be exploited by attackers. Specifically, this flaw allows for arbitrary shell command injections into the server through the session cookies passed to shell processing. This means that an unauthenticated user could potentially execute malicious commands on the server, leading to significant security breaches and system compromise for organizations utilizing this software version.

The affected versions include 7.4 and below, making it critical for users to assess their systems for potential exposure. By leveraging this vulnerability, an attacker could gain full control over the server, manipulate its operations, or infiltrate sensitive data, causing extensive harm to an organization’s infrastructure and reputation.

Potential Impact of CVE-2025-2611

Unauthorized Remote Code Execution: The primary concern is that attackers can execute arbitrary commands on the server without authentication, effectively taking control of the affected system. This can lead to unauthorized access to sensitive information and system resources.
Data Breaches: With the ability to run shell commands, malicious actors could access, modify, or exfiltrate critical data, resulting in significant privacy violations, regulatory non-compliance, and financial losses for organizations.
Increased Risk of Malware Deployment: The exploitation of this vulnerability opens the door for attackers to deploy additional malware, which could be used to further compromise the system, spread laterally within the network, and potentially enable ransomware attacks or other malicious activities, exacerbating the overall impact on the organization.

Affected Version(s)

ICTBroadcast Linux 0 <= 7.4

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-2611 - Proof of Concept

News Articles

Bank Info Security

CVE-2025-2611

Breach Roundup: Chinese Hackers Exploited ArcGIS

This week: Chinese hackers exploited ArcGIS, Internet-exposed call center software under attack, October patch Tuesday, Massachusetts student sentenced for $3

GovInfoSecurity

CVE-2025-2611

Breach Roundup: Chinese Hackers Exploited ArcGIS

This week: Chinese hackers exploited ArcGIS, Internet-exposed call center software under attack, October patch Tuesday, Massachusetts student sentenced for $3