Published:2025/07/23  Last Updated:2025/07/23

JVN#21177718
Real-time Bus Tracking System vulnerable to improper validation of specified quantity in input

Overview

Real-time Bus Tracking System provided by SYNCK GRAPHICA is vulnerable to improper validation of specified quantity in input.

Products Affected

  • Real-time Bus Tracking System versions prior to 1.1

Description

Real-time Bus Tracking System provided by SYNCK GRAPHICA contains the following vulnerability.

  • Improper validation of specified quantity in input (CWE-1284)
    • CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Base Score 5.3
    • CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Base Score 4.3
    • CVE-2025-43881

Impact

A denial of service (DoS) condition may be caused by an attacker who can log in to the administrative page of the affected product.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Vendor Status

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Credit

n3ddih reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2025-43881
JVN iPedia JVNDB-2025-000051