CVE-2025-26401

Published: Apr 4, 2025Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.0 / Impact: 4.0

Source: vultures@jpcert.or.jp (Secondary)

Description

Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker.

Related CWEs

CWE-261

Weak Encoding for Password

Obscuring a password with a trivial encoding does not protect the password.

References (2)

https://jvn.jp/en/jp/JVN17260367/

Source: vultures@jpcert.or.jp

https://www.electronics.jtekt.co.jp/en/topics/202503207271/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.