PT-2025-17943 · Netscout · Netscout Ngeniusone

Jorge Escabias · Published 2025-04-25 · Updated 2025-05-27 · CVE-2025-32985

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETSCOUT nGeniusONE versions prior to 6.4.0 b2350

Description The issue concerns hardcoded credentials in NETSCOUT nGeniusONE that can be obtained from JAR files.

Recommendations For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-32985

Affected Products

Netscout Ngeniusone

References · 7

• https://netscout.com/securityadvisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32985 · Security Note
• https://twitter.com/dailycve/status/1927427631126868274 · Twitter Post
• https://twitter.com/CVEnew/status/1915877102244839723 · Twitter Post
• https://t.me/cvetracker/22403 · Telegram Post
• https://t.me/cvedetector/23786 · Telegram Post