VULNERABILITY INTELLIGENCE

CVE-2025-47698

EPSS probability0.14%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-10-18

Description

An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. These credentials are present during the firmware upgrade procedure.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-319

Primary references