MICROSENS NMP Web+
Advisory ansehen veröffentlicht 2025-06-24
Successful exploitation of these vulnerabilities could allow an attacker to gain system access, overwrite files or execute arbitrary code.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-49153US | — | — | ||
The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code. | ||||
| CVE-2025-49152US | — | — | ||
The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system. | ||||
| CVE-2025-49151US | — | — | ||
The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-175-07 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-175-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/ - MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/ - MitigationNMP Web+
MICROSENS recommends users to update to NMP Web+ Version 3.3.0 for Windows and Linux.
https://www.microsens.com/support/downloads/nmp/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan