OS Command Injection Vulnerability in ThreatSonar Anti-Ransomware by TeamT5
CVE-2025-7145

8.6HIGH

Key Information:

Vendor

Teamt5

Status
Threatsonar Anti-ransomware
Vendor
CVE Published:
7 July 2025

What is CVE-2025-7145?

The ThreatSonar Anti-Ransomware software, developed by TeamT5, is susceptible to an OS Command Injection vulnerability. This flaw allows remote attackers who possess intermediate privileges on the product platform to inject arbitrary operating system commands. If exploited, this can lead to unauthorized command execution on the server, potentially granting attackers administrative control and compromising the entire remote host. It is crucial for users of ThreatSonar to promptly apply recommended patches to secure their systems.

Affected Version(s)

ThreatSonar Anti-Ransomware 3.6.0 <= 3.8.3

References

https://www.twcert.org.tw/tw/cp-132-10231-a15c8-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10232-f99c0-2.html
third-party-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.