CVE-2025-3606CWE-497
Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere
High · published April 24, 2025
What it is
Vestel AC Charger
version
3.75.0 contains a vulnerability that
could enable an attacker to access files containing sensitive
information, such as credentials which could be used to further
compromise the device.
The record
Technical detail
- CVSS v4.0
- 8.7 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00408 · 33.9th percentile
- Weakness
- CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Published
- 2025-04-24T23:15Z
EPSS history
Timeline