ICSA-25-175-07

MICROSENS NMP Web+

view advisory published 2025-06-24

Successful exploitation of these vulnerabilities could allow an attacker to gain system access, overwrite files or execute arbitrary code.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-49153US	—	0.74% (54th)	—	2025-06-25
The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code.
CVE-2025-49152US	—	0.49% (42nd)	—	2025-06-25
The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.
CVE-2025-49151US	—	0.60% (49th)	—	2025-06-25
The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication.

External citations — patches, advisories, analysis.

MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/
MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/
MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.