PT-2025-20648 · Dígitro · Dígitro Ngc Explorer

J369 · Published 2025-05-11 · Updated 2025-05-11 · CVE-2025-4527

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dígitro NGC Explorer version 3.44.15

Description A vulnerability has been found in the Password Transmission Handler component, allowing for client-side enforcement of server-side security. The attack can be initiated remotely, but the complexity is rather high and the exploitation appears to be difficult.

Recommendations For Dígitro NGC Explorer version 3.44.15, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-4527

Affected Products

Dígitro Ngc Explorer

References · 14

• https://digitro.com/recomendacao-10-2026-ctir-gov · Patch
• https://osv.dev/vulnerability/CVE-2025-4527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4527 · Security Note
• https://t.me/cvedetector/25034 · Telegram Post
• https://vuldb.com/vuln/308272/cti · Note
• https://vuldb.com/?ctiid.308272 · Note
• https://vuldb.com/vuln/308272 · Note
• https://twitter.com/CVEnew/status/1921398589990781287 · Twitter Post
• https://t.me/cvetracker/23568 · Telegram Post
• https://vuldb.com/submit/565308 · Note
• https://gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026 · Note
• https://vuldb.com/?id.308272 · Note
• https://t.me/cvenotify/121661 · Telegram Post
• https://vuldb.com/?submit.565308 · Note