CVE-2025-66237 in DCIM dcTrack

Résumé

par MITRE • 04/12/2025

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Icscert
• Réserver: 25/11/2025
• Divulgation: 04/12/2025
• Modérer: accepté
• Entrée: VDB-334395
• CPE: prêt
• CWE: CWE-798 (confirmé)
• CVSS: 6.7 (CNA)
• EPSS: 0.00131
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-66237
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-66237
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-66237/