CVE-2025-14096CWE-250CWE-798

Credential Disclosure vulnerability in Radiometer Products

High · published December 17, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

🚨 A vulnerability in Radiometer products could allow anyone with physical access to snag credential info – like finding the code to a secure vault just lying around! 🔥 Think of the analyzer as a secured hotel room that has the key left under the doormat. Anyone who finds that key has complete access to everything inside, potentially exposing sensitive data. If an attacker gains physical access, they could extract credentials, opening the door to unauthorized actions that can compromise patient data and overall system integrity. This could lead to a chain reaction of security breaches that are absolutely devastating to trust and safety in medical environments.

Put simply

Think of the analyzer as a secured hotel room that has the key left under the doormat. Anyone who finds that key has complete access to everything inside, potentially exposing sensitive data. This vulnerability arises from insufficient protection of credentials in Radiometer's operating systems, allowing attackers with physical access to extract sensitive information from the analyzers.

What to do

If an attacker gains physical access, they could extract credentials, opening the door to unauthorized actions that can compromise patient data and overall system integrity. This could lead to a chain reaction of security breaches that are absolutely devastating to trust and safety in medical environments. Ensure only authorized personnel can physically access the analyzers to mitigate risks. Radiometer representatives will be contacting affected customers for a permanent solution; stay tuned and make sure to engage with them! You've got this! Stay alert and proactive, and your systems will be secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Weaknesses
CWE-250 · Execution with Unnecessary Privileges; CWE-798 · Use of Hard-coded Credentials
Published
2025-12-17T12:19Z
EPSS history
Timeline
  • 17 DEC 12:19Z
    Credential Disclosure vulnerability in Radiometer Products
    cvelistv5