轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202511-00000014

[內容說明]
【元岡科技｜ThinPLUS - OS Command Injection】( CVE-2025-13284，CVSS：9.8) 元岡科技開發之ThinPLUS存在OS Command Injection漏洞，未經身分鑑別之遠端攻擊者可注入任意作業系統指令並於伺服器上執行。

[影響平台]
ThinPLUS

[建議措施]
聯繫廠商進行更新

[參考資料]
1. https://www.twcert.org.tw/tw/cp-132-10512-e196b-1.html
Forwarded from Taiwan Computer Network Crisis Management and Coordination Center: Cybersecurity Alert TWCERTCC-200-202511-00000014

[Content Description]
【Yuangang Technology｜ThinPLUS - OS Command Injection】(CVE-2025-13284, CVSS: 9.8) ThinPLUS, developed by Yuangang Technology, contains an OS Command Injection vulnerability. An unauthenticated remote attacker can inject arbitrary operating system commands and execute them on the server.

[Affected Platforms]
ThinPLUS

[Recommended Actions]
Contact the vendor for an update.

[References]
1. https://www.twcert.org.tw/tw/cp-132-10512-e196b-1.html