PT-2025-44633 · Unknown · Manufacturer’S+1

CVE-2025-64385 · Publicado 2025-10-31 · Atualizado 2025-11-01

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The equipment can be initially configured using the manufacturer's application, Wi-Fi, a web server, or the manufacturer’s software. Configuration via UDP using the manufacturer's software allows changes to any aspect of the initial configuration by using the device's MAC address without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-64385

Produtos afetados

Manufacturer'S Application

Manufacturer’S

Referências · 8

• https://twitter.com/The_SatyaDVV/status/1984478695151808804 · Publicação no Twitter
• https://t.me/CVEtracker/36310 · Publicação no Telegram
• https://hackrtu.com/blog/cg-0day-en-003 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-64385 · Nota de Segurança
• https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010. · Nota
• https://twitter.com/CVEnew/status/1984277948510433659 · Publicação no Twitter
• https://twitter.com/offseq/status/1984432881612067290 · Publicação no Twitter
• https://cds.thalesgroup.com/es/s21sec · Nota