CVE-2025-0941CWE-209

MET ONE 3400+ Potential Credential Exposure

Medium · published February 26, 2025

CVSS v3.1
5.8
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2025-02-26T16:28Z
EPSS history
Timeline
  • 26 FEB 16:28Z
    MET ONE 3400+ Potential Credential Exposure
    cvelistv5