PT-2025-31944 · Roche Diagnostics · Navify Monitoring

Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-7674

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions Roche Diagnostics navify Monitoring versions prior to 1.08.00

Description An improper input validation issue exists in Roche Diagnostics navify Monitoring. An attacker can manipulate input data, potentially leading to a denial of service (DoS) by negatively impacting server performance. This issue does not affect data confidentiality or integrity.

Recommendations Update Roche Diagnostics navify Monitoring to version 1.08.00 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-7674

Affected Products

Navify Monitoring

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-7674 · Security Note
• https://preview-owp.roche.com/content/dam/diagnostics/Blueprint/en/pdf/navify%20Monitoring%20-%20API%20Input%20Validation%20Vulnerability%20-%20Product%20Security%20Advisory.pdf · Vendor Advisory
• https://t.me/CVEtracker/29220 · Telegram Post
• https://twitter.com/CVEnew/status/1952781977654055130 · Twitter Post