CVE-2025-7674 | THREATINT

Description

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service (DoS) due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This issue affects navify Monitoring before 1.08.00.

Reserved 2025-07-15 | Published 2025-08-05 | Updated 2025-08-05 | Assigner Roche

HIGH: 7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:M/U:Green

Problem types

CWE-20 Improper Input Validation

Product status

Default status

unaffected

Any version before 1.08.00

affected

References

preview-owp.roche.com/...ity - Product Security Advisory.pdf vendor-advisory

cve.org (CVE-2025-7674)

nvd.nist.gov (CVE-2025-7674)

Download JSON