Auth bypass in Idera Up.time Monitoring Station
CVE-2025-34121
An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263.
Vulnerability class: Broken Authentication
Published · last modified .
EPSS exploit prediction
EPSS: 0.024 (83.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 83.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.024 · change: +0.007
Affected products
- Idera Up.time Monitoring Station — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/m… (exploit)
- web.archive.org/web/20150210113937/http://www.security-assessment.com/files/doc… (exploit, third-party-advisory)
- www.exploit-db.com/exploits/38732 (exploit)
- www.vulncheck.com/advisories/idera-uptime-arbitrary-file-upload-rce (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34121?
- CVE-2025-34121 is a vulnerability in Idera Up.time Monitoring Station, classified under Missing Authentication for Critical Function. Published 2025-07-16.
- Is CVE-2025-34121 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.