References https://nvd.nist.gov/vuln/detail/CVE-2025-5095 https://cvefeed.io/vuln/detail/CVE-2025-5095 https://github.com/advisories/GHSA-f2pq-885w-7238 https://www.sentinelone.com/vulnerability-database/cve-2025-5095/ https://www.isssource.com/burk-technology-clears-arc-solo/ https://securityonline.info/cve-2025-5095-cvss-9-8-critical-flaw-in-arc-solo-broadcasting-devices-allows-unauthenticated-takeover/ https://vuldb.com/?id.319199 https://beyondmachines.net/event_details/critical-authentication-bypass-flaw-in-burk-technology-arc-solo-devices-a-v-7-g-5
Related VulnerabilitiesPoCCVE-2021-4463: Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File DownloadPoCCVE-2025-10353: Melis Technology Melis Platform - Unrestricted File Upload & Remote Code ExecutionPoCCVE-2024-4257: BlueNet Technology Clinical Browsing System 1.2.1 - Sql InjectionPoCbems-api-lfi: Longjing Technology BEMS API 1.21 - Local File InclusionPoCwp-ellipsis-xss: Ellipsis Human Presence Technology <= 2.0.8 - Cross Site ScriptingMicrochip Technology SyncServer ping.php 命令执行漏洞Shanghai Brad Technology BladeX SQL注入漏洞