medium4.4
CVE-2025-27459
The VNC application stores its passwords encrypted within the registry but uses DES for encryption.
Impact
The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endress | Meac300-Fnade4 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://sick.com/psirt
- https://sick.com/psirt
- https://sick.com/psirt
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.endress.com
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf