BaseFortify

Publication date: 2025-11-10

Last updated on: 2025-11-14

Assigner: Mandiant Inc.

Description

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-10

Last Modified

2025-11-14

Generated

2026-07-06

AI Q&A

2025-11-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12480

Affected Vendors & Products

Vendor	Product	Version / Range
gladinet	triofox	to 16.7.10368.56560 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Access Control flaw in Triofox versions prior to 16.7.10368.56560 that allows unauthorized access to the initial setup pages even after the setup process is complete.

Impact Analysis

The vulnerability can lead to unauthorized users accessing sensitive setup pages, potentially allowing them to change configurations or gain elevated access, which can compromise confidentiality and integrity of the system.

Hi! I’m here to help you understand CVE-2025-12480. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70