Missing Authentication in ZONG YU's Okcat Parking Management Platform
CVE-2025-4555

9.3CRITICAL

Key Information:

Vendor

Zong Yu

Status
Okcat Parking Management Platform
Vendor
CVE Published:
12 May 2025

What is CVE-2025-4555?

The Okcat Parking Management Platform by ZONG YU is susceptible to a missing authentication issue in its web management interface. This vulnerability enables unauthorized remote attackers to exploit the system's functionalities without proper authentication. Attackers may gain direct access to crucial operations such as opening parking gates, viewing sensitive license plate information, accessing parking records, and even restarting the entire system, potentially leading to significant security breaches.

Affected Version(s)

Okcat Parking Management Platform 0

References

https://www.twcert.org.tw/tw/cp-132-10108-f77f5-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10109-25719-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-4555 : Missing Authentication in ZONG YU's Okcat Parking Management Platform