CVE-2018-25129

SOCA Access Control System 180612 Information Disclosure via Multiple Endpoints

High7.1EPSS 0.37%

Published: 24 Dec 2025
Updated: 24 Dec 2025
Reserved: 24 Dec 2025
Assigned by: VulnCheck

Description

SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials. Attackers can retrieve authenticated and unauthenticated user password hashes and pins through unprotected endpoints like Get_Permissions_From_DB.php and Ac10_ReadSortCard.

Scores

CVSS scores of CVE-2018-25129, by who scored it
Scored by	CVSS	Score	Vector
VulnCheckCNA (assigner)	4.0	High7.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Deferred	4.0	High7.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.37% · top 69% of all CVEs (4 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Weakness

CWE-639: Authorization Bypass Through User-Controlled Key (opens in a new tab)All about CWE-639 and its CVEs

Affected products

SOCA Technology Co., Ltd · SOCA Access Control System
- affected 180612
- affected 170000
- affected 141007

References (3)

ExploitDB-46832 (opens in a new tab)exploit
SOCA Technology Product Homepage (opens in a new tab)product
Zero Science Lab Disclosure (ZSL-2019-5517) (opens in a new tab)third-party-advisoryexploit

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-25129](https://trackcve.app/badge/CVE-2018-25129.svg)](https://trackcve.app/cve/CVE-2018-25129)

Record last updated 24 Dec 2025, 20:27 UTC.