BaseFortify

Publication date: 2025-12-04

Last updated on: 2025-12-08

Assigner: ICS-CERT

Description

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-04

Last Modified

2025-12-08

Generated

2026-07-06

AI Q&A

2025-12-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-66237

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves DCIM dcTrack platforms using default and hard-coded credentials for access. An attacker who obtains these credentials can administer the database, escalate privileges on the platform, or execute system commands on the host.

Impact Analysis

The vulnerability can allow an attacker to gain unauthorized administrative access to the database, escalate their privileges on the platform, and execute system commands on the host. This can lead to data compromise, system manipulation, and potentially full control over the affected system.

Hi! I’m here to help you understand CVE-2025-66237. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70