CVE-2025-63958
BaseFortify
Publication date: 2025-11-24
Last updated on: 2025-12-30
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| millensys | vision_tools_workspace | 5.10.5.2429 |
| millensys | vision_tools_workspace | 6.5.0.2585 |
| millensys | vision_tools_workspace | 6.5.0.2596 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in MILLENSYS Vision Tools Workspace 6.5.0.2585 allows unauthenticated attackers to access a sensitive configuration endpoint (/MILLENSYS/settings) without any authentication. This endpoint exposes plaintext database credentials, file share paths, internal license server configuration, and software update parameters due to missing access controls on a privileged administrative function.
How can this vulnerability impact me? :
An attacker who exploits this vulnerability can retrieve sensitive configuration information such as database credentials and internal system details, which can potentially lead to full system compromise.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
You can detect this vulnerability by attempting to access the /MILLENSYS/settings endpoint on the MILLENSYS Vision Tools Workspace server without authentication. For example, use a command like: curl http://<target-ip-or-hostname>/MILLENSYS/settings If the endpoint returns sensitive configuration information such as plaintext database credentials, file share paths, or license server details without requiring authentication, the system is vulnerable.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the /MILLENSYS/settings endpoint by implementing proper authentication and access controls. If possible, block external access to this endpoint via firewall rules or network segmentation. Additionally, review and rotate any exposed credentials to prevent unauthorized access.