CVE-2025-2155 HIGH

CVE-2025-2155: Arbitrary File Upload in EchoCCS's Specto CM

Vendor Echo Call Center Services Trade And Industry Inc.
Product Specto CM
Weakness CWE-434 · Unrestricted file upload
Published December 24, 2025
Last update June 6, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025.

Key dates

02Disclosure timeline

December 24, 2025 CVE published
June 6, 2026 Record updated