CVE-2025-49851

Опубликовано: 24 июн. 2025

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

Ссылки

https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:on-premises:*:*:*

Версия до 4.7.50.0 (исключая)

EPSS

Процентиль: 30%

0.0011

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-rx5w-4vhh-gg8p

CVSS3: 9.8

github

8 месяцев назад

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an Improper Authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

BDU:2026-00166

CVSS3: 7.5

fstec