CVE-2025-49152CWE-613

Insufficient Session Expiration in MICROSENS NMP Web+

High · published June 25, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00492 · 41.4th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-06-25T16:34Z
EPSS history
Timeline
  • 25 JUN 16:34Z
    Insufficient Session Expiration in MICROSENS NMP Web+
    cvelistv5