BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-01-26

Assigner: ICS-CERT

Description

A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-01-26

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-14751

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-620	When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.

Attack-Flow Graph

Executive Summary

This vulnerability allows a low-privileged user to bypass account credentials without confirming the user's current authentication state, potentially enabling unauthorized privilege escalation.

Impact Analysis

The vulnerability can lead to unauthorized privilege escalation, meaning an attacker with low privileges could gain higher-level access, potentially compromising system security and sensitive data.

Hi! I’m here to help you understand CVE-2025-14751. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70