Vulnerability Details CVE-2025-27459
The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.2%
CVSS Severity
CVSS v3 Score 4.4
References
- https://sick.com/psirt
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.endress.com
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf
Products affected by CVE-2025-27459
-
cpe:2.3:h:endress:meac300-fnade4:-
-
cpe:2.3:o:endress:meac300-fnade4_firmware:*