PT-2025-49147 · Dctrack · Dctrack

Published 2025-12-04 · Updated 2025-12-05 · CVE-2025-66237

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dcTrack (affected versions not specified)

Description dcTrack platforms are susceptible to unauthorized access due to the use of default and hard-coded credentials. An attacker gaining access through these credentials could administer the database, escalate privileges on the platform, and potentially execute system commands on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-66237

Affected Products

Dctrack

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-66237 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-338-05.json · Note
• https://twitter.com/CVEnew/status/1996694560681218292 · Twitter Post
• https://twitter.com/syedaquib77/status/1996824200359956867 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-338-05 · Note
• https://twitter.com/VulmonFeeds/status/1996853858195112255 · Twitter Post