CVE-2025-28235

Published: Apr 18, 2025Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28235

Source: cve@mitre.org

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28235

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.