VULNERABILITY INTELLIGENCE
CVE-2025-25061
CVSS score5.8 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Description
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.
Weakness classification
- vultures@jpcert.or.jp: CWE-441