References https://nvd.nist.gov/vuln/detail/CVE-2025-4540 https://www.cve.org/CVERecord?id=CVE-2025-4540 https://0nightsedge0.github.io/2025/05/14/CVE-2025-4540-C-Lodop/index.html https://github.com/advisories/GHSA-5w6r-h2m8-3mxg https://cve.imfht.com/detail/CVE-2025-4540 https://access.redhat.com/security/cve/cve-2025-4540 https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-4540
Related VulnerabilitiesWindows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞维达外贸客户关系管理系统 LodopDown 任意文件读取漏洞PoC维达外贸客户关系管理系统LodopDown存在任意文件读取漏洞Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)(CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code ExecutionPoCCVE-2017-7269: Windows Server 2003 & IIS 6.0 - Remote Code ExecutionPoCCVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request ForgeryPoCc-lodop-read-file: C-Lodop 云打印机系统平台任意文件读取漏洞