Improper validation of specified quantity in input issue exists in Real-time Bus Tracking…
Priority LOW 24CWE-1284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1. If exploited, a denial of service (DoS) condition may be caused by an attacker who can log in to the administrative page of the affected product.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00333 26th percentileScored 2026-11-07
Fix Fixed Real-time Bus Tracking System (SYNCK GRAPHICA): 1.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SYNCK GRAPHICA | Real-time Bus Tracking System | before 1.1 | 1.1 | Patch available | CNA |
- Real-time Bus Tracking System VendorSYNCK GRAPHICA Affected before 1.1 Fixed in 1.1 Patch available CNA
Remediation
- Fix · CNA Real-time Bus Tracking System (SYNCK GRAPHICA) Fixed in 1.1
Timeline
- 2026-10-02 Threatist record created from CVE-2025-43881
- 2026-10-03 Alias added: GHSA-97c7-fxwg-rj4c
References
More SYNCK GRAPHICA vulnerabilities
- TI-2023-21397 Regular expression denial of service in SYNCK GRAPHICA Mailform Pro CGI CVSS 3.1HIGH 7.5
- TI-2023-15891 Regular expression denial of service in SYNCK GRAPHICA Mailform Pro CGI CVSS 3.1HIGH 7.5
- TI-2015-00822 SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled… CVSS 2.0MEDIUM 6.8
- TI-2022-18025 Information disclosure in SYNCK GRAPHICA Mailform Pro CGI CVSS 3.1MEDIUM 5.9
- TI-2025-27602 Information disclosure through error messages in SYNCK GRAPHICA Mailform Pro CGI CVSS 4.0MEDIUM 6.3
- TI-2015-00807 Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2025-43881 · CVE Program
- CVE-2025-43881 · NVD
- FIRST EPSS
- GHSA-97c7-fxwg-rj4c · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences