CVE-2025-5436 MEDIUM

CVE-2025-5436: Multilaser Sirius RE016 cstecgi.cgi information disclosure

Vendor Multilaser
Product Sirius RE016
Weakness CWE-200 · Info exposure
Published June 2, 2025
Last update June 2, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

June 2, 2025 CVE published
June 2, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-3800 CVE-2024-12159 Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Information Exposure CVE-2024-41108 FOG Sensitive Information Disclosure CVE-2025-7654 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library CVE-2023-52190 WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure