PT-2025-48780 · Unknown · Nmis/Biodose

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-64642

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions NMIS/BioDose versions prior to 22.02

Description The installation directory paths for NMIS/BioDose, by default, have insecure file permissions. This can allow users on client workstations to modify program executables and libraries in certain deployment scenarios.

Recommendations Ensure secure file permissions are configured for the installation directory of versions prior to 22.02.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-64642

Affected Products

Nmis/Biodose

References · 5

• https://osv.dev/vulnerability/CVE-2025-64642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64642 · Security Note
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01 · Note
• https://twitter.com/CVEnew/status/1995969418375864717 · Twitter Post
• https://t.me/CVEtracker/38722 · Telegram Post