8.7
CVE-2025-30183
- EPSS 0.36%
- Veröffentlicht 09.06.2025 22:30:24
- Zuletzt bearbeitet 12.08.2025 14:20:51
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
CyberData 011209 SIP Emergency Intercom Insufficiently Protected Credentials
CyberData 011209 Intercom does not properly store or protect web server admin credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyberdata ≫ 011209 Sip Emergency Intercom Firmware Version < 22.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.272 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| ics-cert@hq.dhs.gov | 8.7 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| ics-cert@hq.dhs.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01