CVE-2025-54343
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
Affects 1 product across 1 vendor.
Software does not restrict or incorrectly restricts access to a resource.
Show all 17
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
An Incorrect Access Control vulnerability in Desktop Alert PingAlert versions 6.1.0.1, 6.1.0.11 to 6.1.1.2 allows for remote escalation of privileges, posing a significant security risk.
BSID: BS-2025-GLOBAL-273507-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-54343?
What is the CVSS score for CVE-2025-54343?
Is CVE-2025-54343 actively exploited?
How do I remediate CVE-2025-54343?
What systems are affected by CVE-2025-54343?
| CVE ID | CVE-2025-54343 |
|---|---|
| BSID | BS-2025-GLOBAL-273507-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
| Published | 2025-11-14 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited remotely by an attacker to gain unauthorized access and escalate their privileges within the application server, potentially leading to full system compromise.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Desktopalert | Pingalert Application Server | ≥ 6.1.0.11, < 6.1.1.4 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 0ebe09e6f169946437806b7f866b5863fb60e7a0d6aac208a4bf768e0cc7cfcf66d23c8356cbbbc51e97d38b77ca2cd1b8bfc8e6274081c8893d02946f184851 |
Critical Severity - Know Your Exposure
A CVSS 9.6 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →