medium6.5
CVE-2025-27457
All communication between the VNC server and client(s) is unencrypted.
Impact
All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endress | Meac300-Fnade4 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://sick.com/psirt
- https://sick.com/psirt
- https://sick.com/psirt
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.endress.com
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf