An unauthenticated remote attacker can gain access to the affected device without password protection. This vulnerability allows for unprotected read-only access to the stored measurement data, potentially exposing sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-41689 |
Exploitation
To exploit this vulnerability, an attacker can remotely access the affected device over the network without needing any authentication. By sending crafted requests, the attacker can retrieve stored measurement data, which may contain sensitive information.
Affected Products
- Affected devices that store measurement data and do not require authentication for access.
Mitigation
To mitigate this vulnerability, it is recommended to implement authentication mechanisms for accessing the affected devices. Additionally, ensure that firmware is updated to the latest version to address any known vulnerabilities.