Path Traversal in Philips Intellispace Portal
CVE-2025-3424
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the "Object Marshalling" technique, which allows an attacker to read internal files without any authentication. This is possible by crafting specific .NET Remoting URLs derived from information enumerated in the client-side configuration files. This issue affects IntelliSpace Portal: 12 and prior.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.002 (14.5th percentile) — read the EPSS interpretation.
Affected products
- Philips Intellispace Portal — versions 12 and prior
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-3424?
- CVE-2025-3424 is a vulnerability in Philips Intellispace Portal, classified under Path Traversal. Published 2025-04-07.
- Is CVE-2025-3424 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.