CVE-2025-63910 - Vulnerability Analysis

Overview

Cohesity TranZman Migration Appliance Release 4.0 Build 14614 contains an unrestricted file upload vulnerability caused by authenticated arbitrary file upload, letting attackers with Administrator privileges execute arbitrary code via crafted patch file.

Severity & Score

Impact

Attackers with Administrator privileges can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

• https://github.com/GregDurys/Cohesity-TranZman-CVEs
• https://docs.stoneram.com/index.php/Tranzman
• https://gist.github.com/GregDurys/74c36c36bef81293a42022758f2736a9

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner