CVE-2025-34156CWE-497

CVE-2025-34156

published October 23, 2025

CVSS
6.9
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-10-23T21:15Z
References (3)
https://aggregate.digital/downloads.html · [email protected]https://aggregate.digital/products/network-manager.html · [email protected]https://www.vulncheck.com/advisories/tibbo-aggregate-network-manager-system-information-exposure · [email protected]
EPSS history
Timeline
  • 23 OCT 16:30Z
    Tibbo AggreGate Network Manager < 6.40.05 System Information Exposure
    cvelistv5