Threat database

CVE-2025-68920 is a high-severity vulnerability in C-Kermit versions through 10.0 Beta.12 that allows a remote Kermit system to bypass authorization controls. This flaw enables unauthorized remote attackers to overwrite or retrieve arbitrary files on the local system without authentication or user interaction. The vulnerability stems from missing authorization checks (CWE-862) in the file transfer functionality of C-Kermit, potentially leading to full confidentiality and integrity compromise. Exploitation requires network access but no privileges or user interaction, and the vulnerability has a CVSS score of 8.9. Although no known exploits are currently reported in the wild, the impact on affected systems could be severe. European organizations using C-Kermit, especially in sectors relying on legacy or specialized communication protocols, are at risk. Mitigation involves applying patches once available, restricting network access to C-Kermit services, and monitoring for unusual file access patterns.