PT-2025-17677 · Nih · Nih Brics

Chandler Rose · Published 2025-04-23 · Updated 2025-04-24 · CVE-2025-27581

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions NIH BRICS (aka Biomedical Research Informatics Computing System) versions 14.0.0-67 and earlier

Description The issue allows users without the InET role to access the InET module by making direct requests to known endpoints.

Recommendations For versions 14.0.0-67 and earlier, restrict access to the InET module to minimize the risk of exploitation. As a temporary workaround, consider disabling direct requests to known endpoints until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2025-27581

Affected Products

Nih Brics

References · 8

• 🔥 https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-27581 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27581 · Vendor Advisory
• https://github.com/brics-dev/brics · Note
• https://brics.cit.nih.gov · Note
• https://t.me/cvetracker/22243 · Telegram Post
• https://t.me/cvedetector/23630 · Telegram Post
• https://twitter.com/CVEnew/status/1915189406178410746 · Twitter Post