CVE-2026-125297

Summary

The AsiaInfo BSS 9.2.0–9.2.40 management API endpoint '/bss/sysmgnt/api/' lacks authentication, allowing unauthenticated remote attackers to perform administrative actions such as creating privileged accounts or taking over existing ones. This critical flaw stems from missing access controls (CWE-862) and the absence of authentication checks (CWE-306).

Exploitability

Exploitation is trivial for any remote attacker with network access to the vulnerable endpoint; no authentication, user interaction, or special conditions are required.

Blast radius

Successful exploitation grants full administrative control over the BSS, enabling complete compromise of customer data, billing manipulation, service disruption, and lateral movement within connected systems.

Detection

Defenders should monitor for unauthenticated HTTP requests to '/bss/sysmgnt/api/' endpoints, especially POST/PUT/DELETE operations targeting user management or configuration APIs, and correlate with successful administrative actions (e.g., new admin accounts, privilege escalations) in application logs. No reliable host-based indicators are derivable from the published description.

Prioritized remediation

Upgrade to AsiaInfo BSS version 9.2.41 or later to patch the authentication bypass vulnerability in the '/bss/sysmgnt/api/' endpoint.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.