Description
SysAid是SysAid Technologies公司推出的一款IT服务管理（ITSM）解决方案，提供帮助台、资产管理、IT服务监控等功能，广泛应用于企业IT运维管理场景。SysAid On-Premises /mdm/checkin 接口存在XML外部实体注入漏洞，攻击者可利用该漏洞读取服务器敏感文件或发起内网请求。
SysAid /mdm/checkin XML 外部实体注入漏洞（CVE-2025-2775）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-2775
https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
https://www.sonicwall.com/blog/critical-sysaid-xxe-vulnerabilities-expose-systems-to-remote-exploitation-cve-2025-2775-2777-
https://arcticwolf.com/resources/blog/cve-2025-2775/
https://www.cve.org/CVERecord?id=CVE-2025-2775
https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain
https://www.ionix.io/blog/sysaid-on-prem-xml-external-entity-vulnerability-cve-2025-2775/
https://hoeasys.com/blogs/CyberSecurityNews/2025-05/0507-The-SysOwned-Chain--Unauthenticated-RCE-in-SysAid-On-Premise-via-Multiple-Vulnerabilities.html