CVE-2025-4634 - CVE House
Back to Database
Status published Medium CVE-2025-4634

Local File Inclusion

Vulnerability Description

The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4634

Credits & Attribution

No credits recorded in the NVD database.

References

More from JCT

View All →
CVE-2025-4636
Local Privilege Escalation
High 7.8
CVE-2025-4635
Remote Code Execution
Medium 6.6
CVE-2025-4633
Default Credentials
Medium 6.5

Affected Vendor

Affected Software

Airpointer
Vulnerable Versions:
2.4.107-2

Timeline

Official Publish: May 30th, 2025
Last Modified: May 30th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)

CWE-552

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1083 File and Directory Discovery
Discovery
T1005 Data from Local System
Collection
T1041 Exfiltration Over C2 Channel
Exfiltration
T1565 Data Manipulation
Impact