PT-2025-51784 · Güralp · Güralp Minimus Series+2

Souvik Kandar · Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-14466

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Güralp Fortimus Series Güralp Minimus Series Güralp Certimus Series (affected versions not specified)

Description A flaw exists in the web interface of Güralp Fortimus, Minimus, and Certimus Series devices. An unauthenticated attacker with network access can send crafted HTTP requests, causing the web service process to restart. This results in a temporary denial-of-service condition during the restart process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-14466

Affected Products

Güralp Certimus Series

Güralp Fortimus Series

Güralp Minimus Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14466 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-350-01.json · Note
• https://t.me/CVEtracker/40007 · Telegram Post
• https://twitter.com/CVEnew/status/2001350864120996140 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-350-01 · Note