CVE-2025-2500

HIGH

7.4

Description

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.

CVE Details

CVSS v3.1 Score7.4

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack VectorNETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

Published5/30/2025

Last Modified5/30/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-256

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000212&LanguageCode=en&DocumentPartId=&Action=Launch(cybersecurity@hitachienergy.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.