CVE-2025-14611 Scanner

Gladinet CentreStack and Triofox are widely used by enterprises for cloud storage and sharing solutions. These platforms offer seamless integration with cloud services, allowing businesses to manage their data efficiently. The systems are used by both small and large organizations across various industries, including healthcare, finance, and education. Their primary purpose is to provide a secure environment for storing and sharing files. They offer features like centralized management, access controls, and collaboration capabilities. These products are vital tools for maintaining productivity while ensuring data security and compliance with industry standards.

The hard-coded credentials vulnerability in Gladinet CentreStack and Triofox arises from the use of fixed cryptographic keys. This flaw allows unauthorized users to bypass security mechanisms by exploiting static AES cryptoscheme values. When attackers gain access, they can perform arbitrary local file inclusions without needing authentication. As a result, the vulnerability can lead to data exposure, unauthorized data manipulation, and potentially full system compromise. This type of vulnerability is critical because it undermines one of the fundamental security controlsauthentication and access management.

The vulnerability details involve the improper handling and storage of cryptographic keys within the software. Instead of utilizing dynamic keys, the software employs hard-coded keys that can be easily extracted and exploited. The vulnerable endpoints typically include URL paths associated with authentication and file handling processes. Attackers manipulate these endpoints using the compromised keys to gain unauthorized access. The critical aspect of this vulnerability lies in the use of insecure cryptographic practices which create a significant security hole in the system.

The exploitation of this vulnerability can have severe consequences, including unauthorized data access and system control. Attackers could potentially expose sensitive corporate and personal data, resulting in data leaks and privacy violations. Furthermore, successful exploitation allows attackers to execute arbitrary code, leading to full system takeover. Organizations affected by this exploit could face financial losses, reputational damage, and legal consequences due to data breaches and non-compliance with data protection regulations.

REFERENCES

• https://www.huntress.com/blog/active-exploitation-gladinet-centrestack-triofox-insecure-cryptography-vulnerability
• https://nvd.nist.gov/vuln/detail/CVE-2025-14611