Path Traversal Vulnerability in Powered BLUE Server by MUBIT
CVE-2025-54959

5.3MEDIUM

Key Information:

Vendor

Mubit Co.,ltd.

Status
Powered Blue 870
Vendor
CVE Published:
8 August 2025

What is CVE-2025-54959?

The Powered BLUE Server, specifically versions 0.20130927 and earlier, contains a path traversal vulnerability that could allow an attacker to gain unauthorized access to sensitive files within the server. By exploiting this flaw, an attacker could potentially disclose arbitrary files, leading to exposure of confidential information. It is crucial for users to update to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

Powered BLUE 870 0.20130927 and prior

References

https://www.mubit.co.jp/sub/products/blue/pb-base-cloud-8...
https://jvn.jp/en/jp/JVN39636188/

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54959 : Path Traversal Vulnerability in Powered BLUE Server by MUBIT