CVE-2025-3600

Published May 14, 2025

Last updated 4 months ago

Progress Telerik UI

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-3600 is an unsafe reflection vulnerability found in Progress Telerik UI for AJAX, affecting versions 2011.2.712 up to 2025.1.218. This vulnerability can lead to an unhandled exception. The vulnerability may cause the hosting process to crash, resulting in a denial-of-service condition. In certain environments, the impact of CVE-2025-3600 could be escalated to remote code execution.

Description: In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.
Source: security@progress.com
NVD status: Analyzed
Products: telerik_ui_for_asp.net_ajax

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C70541A7-BB83-4E23-927A-0676BD5A0E1E",
            "versionEndIncluding": "2025.1.218",
            "versionStartIncluding": "2011.2712"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.