CVE-2025-1709
BaseFortify
Publication date: 2025-07-03
Last updated on: 2026-02-06
Assigner: SICK AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| endress | meac300-fnade4_firmware | to 0.16.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-256 | The product stores a password in plaintext within resources such as memory or files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves several credentials for the local PostgreSQL database being stored in plain text, with some of them partially base64 encoded. This means that sensitive authentication information is not properly protected and can be easily accessed or decoded by unauthorized users.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to the local PostgreSQL database because credentials are stored in an easily accessible and readable format. This can result in data exposure or compromise, especially since the confidentiality impact is high according to the CVSS score.