Command Modification Vulnerability in Sangfor aTrust Product
CVE-2025-52923

4.3MEDIUM

Key Information:

Vendor

Sangfor

Status
Atrust
Vendor
CVE Published:
22 June 2025

What is CVE-2025-52923?

The aTrust application by Sangfor, specifically up to version 2.4.10, contains a vulnerability that allows authenticated users to alter the ExecStartPre command within the system. This flaw could potentially lead to unauthorized command execution or system changes, posing a security risk to the application’s integrity and the environment in which it operates.

Affected Version(s)

aTrust 2.4.10

References

https://github.com/r00t7oo2jm/cVetest/blob/main/p0c.sh
https://github.com/r00t7oo2jm/cVetest/blob/main/sangf0r-p...
https://marketplace.huaweicloud.com/intl/contents/10d76e5...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-52923 : Command Modification Vulnerability in Sangfor aTrust Product