CVE-2025-53507 | THREATINT

Description

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].

PUBLISHED Reserved 2025-07-02 | Published 2025-08-29 | Updated 2025-08-29 | Assigner jpcert

MEDIUM: 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

HIGH: 7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

Insecure storage of sensitive information

Product status

firmware version 1.03 and earlier

affected

firmware version 2.02t and earlier

affected

firmware version 1.03 and earlier

affected

firmware version 2.02t and earlier

affected

firmware version 1.02 and earlier

affected

firmware version 1.02 and earlier

affected

firmware version 1.05e and earlier

affected

firmware version 2.01 and earlier

affected

firmware version 1.11 and earlier

affected

firmware version 1.12 and earlier

affected

firmware version 1.03 and earlier

affected

firmware version 1.01 and earlier

affected

References

www.i-netd.co.jp/vulnerability/dceid-2025-001/

jvn.jp/en/jp/JVN50585992/

cve.org (CVE-2025-53507)

nvd.nist.gov (CVE-2025-53507)

Download JSON