CVEs-PoC/2025/CVE-2025-2777.md

CVE-2025-2777

Description

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.

POC

Reference

• https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/

Github

• https://github.com/0xgh057r3c0n/SysAid-PreAuth-RCE-Chain
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain