BaseFortify

Publication date: 2025-12-22

Last updated on: 2025-12-23

Assigner: Johnson Controls

Description

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-22

Last Modified

2025-12-23

Generated

2026-07-06

AI Q&A

2025-12-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61740

EUVD

EUVD-2025-204712

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication issue where the system does not verify the source of a packet. This flaw could allow an attacker to either create a denial-of-service condition or modify the configuration of the affected device.

Impact Analysis

The vulnerability can impact you by enabling an attacker to disrupt service availability through a denial-of-service attack or by unauthorized modification of device configurations, potentially leading to system instability or security breaches.

Hi! I’m here to help you understand CVE-2025-61740. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70