CVE-2025-4560 in ISOinsight

Résumé

par MITRE • 12/05/2025

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Twcert
• Réserver: 12/05/2025
• Divulgation: 12/05/2025
• Modérer: accepté
• Entrée: VDB-308314
• CPE: prêt
• CWE: CWE-306 (confirmé)
• CVSS: 6.5 (CNA)
• EPSS: 0.00328
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-4560
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-4560
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-4560/