CVE-2025-5493: Baison Channel Middleware Product

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Baison Channel Middleware Product: version 2.0.1 only

Published 2025-06-03. Last modified 2026-06-17.