VULNERABILITY INTELLIGENCE

CVE-2025-37160

CVSS score5.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2025-11-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Primary references