PT-2026-42743 · Centralny Instytut Ochrony Pracy Państwowy Instytut Badawczy · Ster

Michelin Cert · Published 2026-05-22 · Updated 2026-05-22 · CVE-2026-25607

NVD

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded.

This issue was fixed in version 9.5.

Fix

Weakness Enumeration

CWE-261

Related Identifiers

CVE-2026-25607

Affected Products

Ster

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25607 · Security Note
• https://cert.pl/posts/2026/05/CVE-2026-25606 · Note
• https://ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P52000165211572544981480 · Note