References https://nvd.nist.gov/vuln/detail/CVE-2025-53118 https://www.rapid7.com/blog/post/securden-unified-pam-multiple-critical-vulnerabilities-fixed/ https://www.cve.org/CVERecord?id=CVE-2025-53118 https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-1355.html https://github.com/advisories/GHSA-fq2g-f63j-9x36 https://www.sentinelone.com/vulnerability-database/cve-2025-53118/ https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-securdens-unified-pam-patch-immediately https://cyberpress.org/securden-vulnerability/ https://s4e.io/tools/securden-unified-pam-authentication-bypass-cve-2025-53118 https://radar.offseq.com/threat/cve-2025-53118-cwe-306-missing-authentication-for--8a0e2330
Related VulnerabilitiesArcserve Unified Data Protection /management/wizardLogin 权限绕过漏洞(CVE-2024-0799)PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationPoCCVE-2024-0799: Arcserve Unified Data Protection - Authentication BypassPoCCVE-2024-0801: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dllPoCCVE-2011-3315: Cisco CUCM, UCCX, and Unified IP-IVR- Directory TraversalPoCCVE-2013-5528: Cisco Unified Communications Manager 7/8/9 - Directory TraversalPoCCVE-2018-17431: Comodo Unified Threat Management Web Console - Remote Code ExecutionPoCCVE-2020-16139: Cisco Unified IP Conference Station 7937G - Denial-of-ServicePoCCVE-2025-53118: Securden Unified PAM - Authentication BypassPoCCNVD-2021-14536: Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information DisclosurePoCcisco-unified-communications-log4j-rce: Cisco Unified Communications - Remote Code Execution (Apache Log4j)PoCcucm-username-enumeration: Cisco Unified Communications Manager - User Enumeration(CVE-2023-32736) 西门子 SIMATIC S7-PLCSIM、STEP 7 Safety、STEP 7、WinCC Unified、WinCC 权限提升漏洞