← back
CVE-2025-8284

Packet Power EMX and EG Missing Authentication for Critical Function

CVSS 9.3 CRITICALEPSS 0.5%CWE-306
By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms. This vulnerability could allow unauthorized users to access and manipulate monitoring and control functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Packet Power · EGPacket Power · EMX

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-05