Simopro Technology WinMatrix3 Insecure Deserialization Vulnerability Allowing Remote Code Execution
Vulnerability
A vulnerability allowing insecure deserialization has been identified in WinMatrix3 developed by Simopro Technology. This flaw enables unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized data. The vulnerability affects WinMatrix AP versions through 3.8.51.1.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server.
Remediation
Users are advised to update WinMatrix AP to version 3.8.52.5 (Web 1.2.39.5) and install the hotfix, or to version 3.9.1 (Web 1.3.1) or later.
Added: Jul 21, 2025, 6:19 AM
Updated: Jul 21, 2025, 6:19 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
7.7relevance
0.3threat
0.1urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.