An unauthenticated remote attacker can grant access without password protection to the affected device. This enables unprotected read-only access to the stored measurement data. The vulnerability poses a medium severity risk, allowing potential data exposure without requiring any user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-41689 |
Exploitation
To exploit this vulnerability, an attacker can remotely access the affected device without authentication. By sending requests over the network, the attacker can retrieve sensitive measurement data stored on the device, as there are no password protections in place.
Affected Products
- Affected Device: The device in question lacks proper authentication mechanisms, allowing unauthorized access to its stored data.
Mitigation
To mitigate this vulnerability, it is recommended to implement strong authentication mechanisms on the affected device. Regular updates and patches should also be applied to ensure that any known vulnerabilities are addressed promptly.