CVE-2025-10252 | SEAT Queue Ticket Kiosk up to 20250827 Java RMI Registry deserialization

A vulnerability, which was classified as problematic, has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI Registry Handler. This manipulation causes deserialization.

This vulnerability is handled as CVE-2025-10252. The attack can only be done within the local network. Additionally, an exploit exists.

It is advisable to implement restrictive firewalling.

The vendor was contacted early about this disclosure but did not respond in any way.