CVE-2025-64778: falha de alta gravidade em Mirion Medical EC2 Software NMIS BioDose
Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.4epss 0.1%
NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Mirion Medical · EC2 Software NMIS BioDoseCVEs relacionadas — Mirion Medical EC2 Software NMIS BioDose
No mesmo produto, das mais perigosas para as menos.
CVE-2025-62575HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.4%CVE-2025-61940HIGHMirion Medical EC2 Software NMIS BioDose Use of Client-Side AuthenticationEPSS 0.3%CVE-2025-64298HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.3%CVE-2025-64642HIGHMirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical ResourceEPSS 0.1%