CVE-2025-47698CWE-319

CVE-2025-47698

published September 19, 2025

CVSS

8.6

EPSS

Percentile

3.0

In the wild

Unconfirmed

What it is

An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. These credentials are present during the firmware upgrade procedure.

The record

Technical detail

CVSS: 8.6 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00139 · 3.0th percentile
Weakness: CWE-319 · Cleartext Transmission of Sensitive Information
Published: 2025-09-19T01:15Z

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06 · [email protected]

EPSS history

Timeline

18 SEP 21:07Z
An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials
cvelistv5