CVEs-PoC/2025/CVE-2025-2775.md

CVE-2025-2775

Description

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

POC

Reference

• https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/

Github

• https://github.com/0xgh057r3c0n/SysAid-PreAuth-RCE-Chain
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/DevGreick/devgreick
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/packetinside/CISA_BOT
• https://github.com/ums91/CISA_BOT
• https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain