CVE-2025-25061

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-25061
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.

5.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://jvn.jp/en/jp/JVN17260367/
https://www.electronics.jtekt.co.jp/en/topics/202503207269/
https://www.electronics.jtekt.co.jp/en/topics/202503207271/
Configurations

No configuration.

History

07 Apr 2025, 14:18

Type Values Removed Values Added
Summary
  • (es) Existe un problema de proxy o intermediario no deseado ('Confused Deputy') en las series HMI ViewJet C-more y HMI GC-A2, que puede permitir que un atacante remoto no autenticado use el producto como intermediario para un ataque de rebote de FTP.

04 Apr 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-04 02:15

Updated : 2025-04-07 14:18

NVD link : CVE-2025-25061

Mitre link : CVE-2025-25061

CVE.ORG link : CVE-2025-25061

JSON object : View

Products Affected

No product.

CWE
CWE-441

Unintended Proxy or Intermediary ('Confused Deputy')