1. Home
  2. CVE Database
  3. CVE-2025-70833
CRITICAL · 9.4

CVE-2025-70833

An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating...

Vulnerability Description

An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php.

CVSS Score

9.4

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
Lkw199711Smanga3.2.7

Related Weaknesses (CWE)

CWE-639CWE-287

References

FAQ

What is CVE-2025-70833?

CVE-2025-70833 is a vulnerability with a CVSS score of 9.4 (CRITICAL). An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating...

How severe is CVE-2025-70833?

CVE-2025-70833 has been rated CRITICAL with a CVSS base score of 9.4/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-70833?

Check the references section above for vendor advisories and patch information. Affected products include: Lkw199711 Smanga.