CVE-2025-61940highCWE-603

CVE-2025-61940: high-severity vulnerability in Mirion Medical EC2 Software NMIS BioDose

Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication

Published · Updated

Follow this CVE+ Monitor EC2 Software NMIS BioDose

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.3%
In short

The NMIS/BioDose software uses a shared database account that all users access through, with passwords checked only in the application itself rather than the database. This means if someone bypasses the application, they can directly access the database with full permissions.

Technical detail

CVE-2025-61940 exploits client-side authentication enforcement (CWE-603) where NMIS/BioDose V22.02 and earlier use a common SQL Server service account for all database connections. Authentication is validated only at the application layer; an attacker with network access to the database can bypass client software restrictions and directly query the database using the shared credentials, compromising data confidentiality and integrity.

Summary generated and translated by AI from the official description.
NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest version of NMIS/BioDose introduces an option to use Windows user authentication with the database, which would restrict this database connection.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
Mirion Medical · EC2 Software NMIS BioDose
Related CVEs — Mirion Medical EC2 Software NMIS BioDose

In the same product, most dangerous first.

CVE-2025-62575HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.4%CVE-2025-64298HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.3%CVE-2025-64778HIGHMirion Medical EC2 Software NMIS BioDose Use of Hard-coded CredentialsEPSS 0.1%CVE-2025-64642HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.1%