9.8

CVE-2025-69929

Exploit
An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
N3uron ≫ Web User Interface Version1.21.6-230825.1720
N3uron ≫ Web User Interface Version1.21.7-240207.1047
N3uron ≫ Web User Interface Version1.21.13-250422.0858
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.322
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://www.linkedin.com/in/joselabreu
Not Applicable
https://gist.github.com/JoseAbreu28/67f5d8bfc7ba1def526efeda5771a244
Third Party Advisory
Exploit
https://n3uron.com/addressing-cve-2025-69929-in-n3uron-web-user-interface/