What is the CVSS score of CVE-2025-40661?

CVE-2025-40661 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Dm Corporative Cms are affected by CVE-2025-40661?

DM Corporative CMS contains an unauthenticated authentication bypass vulnerability affecting the administrative interface, enabling attackers to access sensitive administrative data without valid…. A patch is available.

How to fix or mitigate CVE-2025-40661?

Within 24 hours: identify all DM Corporative CMS instances in production and verify current version against vendor advisories. Within 7 days: apply vendor-released patch to all affected systems and validate administrative access controls post-deployment. Within 30 days: conduct access log review for the /administer/selectionnode/selection.asp endpoint from the past 90 days to identify potential unauthorized access attempts.

Dm Corporative Cms CVE-2025-40661

EUVD-2025-17648 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2025-06-10 cve-coordination@incibe.es

Information Disclosure Dm Corporative Cms

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:43 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2025.01

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17648

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

CVE Published

Jun 10, 2025 - 10:15 nvd

HIGH 7.5

DescriptionCVE.org

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.

AnalysisAI

CVE-2025-40661 is an Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS that allows unauthenticated attackers to bypass authentication and access the private administrative area by manipulating the 'option' parameter (values 0, 1, or 2) in the /administer/selectionnode/selection.asp endpoint. The vulnerability has a CVSS score of 7.5 (High) with high confidentiality impact, indicating potential exposure of sensitive administrative data. No KEV status, EPSS score, or confirmed POC availability was provided in the source data, limiting definitive assessment of active exploitation.

Technical ContextAI

DM Corporative CMS is a web-based content management system that implements role-based access control through the /administer/selectionnode/selection.asp resource. The vulnerability stems from CWE-639 (Authorization Bypass Through User-Controlled Key), a class of authorization flaws where the application fails to properly validate that the user has permission to access a specific object or function based on user-supplied identifiers. The 'option' parameter (0, 1, 2) likely represents different administrative selection nodes or configuration states; the application trusts this parameter value without verifying the requesting user's authentication status or authorization level. This is a parameter-based IDOR—the attacker modifies a numeric parameter to enumerate and access restricted administrative resources without proper session validation or access control checks.

RemediationAI

Immediate: Restrict network access to the /administer/selectionnode/selection.asp endpoint using WAF rules or web server configuration (IP whitelisting, require VPN). 2. Implement proper authentication and session validation before any parameter processing—verify user identity and authorization level server-side, independent of parameter values. 3. Apply authorization checks per OWASP IDOR prevention guidelines: validate that the authenticated user has explicit permission to access the requested object (option node) before returning data. 4. Contact DM Corporative vendor for security patch/advisory; apply patch when available to the /administer/selectionnode/selection.asp handler. 5. Audit logs for evidence of unauthorized access to /administer/selectionnode/selection.asp with option parameters 0, 1, 2. 6. Long-term: implement consistent server-side access control framework across all administrative endpoints, perform security code review of CMS authorization logic.