{"id":"CVE-2025-3424","aliases":["EUVD-2025-10702","GHSA-hg9x-8q33-pg7f"],"status":"published","title":"3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel","description":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The vulnerability arises from the exploitation\nof port 755 through the \"Object Marshalling\" technique, which allows\nan attacker to read internal files without any authentication. This is possible\nby crafting specific .NET Remoting URLs derived from information enumerated in\nthe client-side configuration files.\n\n\n\n\n\n\n\nThis issue affects IntelliSpace Portal: 12 and prior.","severity":{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Green","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00249,"percentile":0.16356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2025-04-07T15:36:46Z","modified":"2026-06-17T09:19:56Z","products":[{"vendor":"philips","product":"intellispace portal"}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3424"},{"url":"https://www.philips.com/a-w/security/security-advisories.html#security_advisories"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3424"},{"url":"https://github.com/advisories/GHSA-hg9x-8q33-pg7f"}],"sources":{"cve":[{"id":"CVE-2025-3424","title":"3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel","description":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The vulnerability arises from the exploitation\nof port 755 through the \"Object Marshalling\" technique, which allows\nan attacker to read internal files without any authentication. This is possible\nby crafting specific .NET Remoting URLs derived from information enumerated in\nthe client-side configuration files.\n\n\n\n\n\n\n\nThis issue affects IntelliSpace Portal: 12 and prior.","status":"published","published":"2025-04-07T15:36:46.06Z","modified":"2025-04-10T15:42:10.381Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Green","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-10702","description":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The vulnerability arises from the exploitation\nof port 755 through the \"Object Marshalling\" technique, which allows\nan attacker to read internal files without any authentication. This is possible\nby crafting specific .NET Remoting URLs derived from information enumerated in\nthe client-side configuration files.\n\n\n\n\n\n\n\nThis issue affects IntelliSpace Portal: 12 and prior.","status":"published","published":"2025-04-07T15:36:46Z","modified":"2025-04-10T15:42:10Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Green","level":"high"}],"updated_at":"2026-11-02T20:52:36.312116Z"}],"ghsa":[{"id":"GHSA-hg9x-8q33-pg7f","title":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The...","description":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The vulnerability arises from the exploitation\nof port 755 through the \"Object Marshalling\" technique, which allows\nan attacker to read internal files without any authentication. This is possible\nby crafting specific .NET Remoting URLs derived from information enumerated in\nthe client-side configuration files.\n\n\n\n\n\n\n\nThis issue affects IntelliSpace Portal: 12 and prior.","status":"published","published":"2025-04-07T18:30:48Z","modified":"2025-04-10T18:32:02Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Green","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:01:03.805326Z"}],"nvd":[{"id":"CVE-2025-3424","description":"The IntelliSpace portal application utilizes .NET\nRemoting for its functionality. The vulnerability arises from the exploitation\nof port 755 through the \"Object Marshalling\" technique, which allows\nan attacker to read internal files without any authentication. This is possible\nby crafting specific .NET Remoting URLs derived from information enumerated in\nthe client-side configuration files.\n\n\n\n\n\n\n\nThis issue affects IntelliSpace Portal: 12 and prior.","status":"published","published":"2025-04-07T16:15:27.703Z","modified":"2026-06-17T09:19:56.14Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Green","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:59.48027Z"}]}}