This vulnerability (CVE-2025-58642) affects enituretechnology's LTL Freight Quotes – Day & Ross Edition software through unsafe deserialization of untrusted data, enabling object injection attacks. It impacts versions up to 2.1.11. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation details are provided in the available data.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of object injection via deserialization, attackers with high privileges could execute arbitrary code or manipulate system behavior. However, exploitation requires high privileges, which limits the attack surface to privileged users or processes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software to trusted users with high privileges and monitor for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.