Product: Xbox
Summary
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant privacy concerns for users. Attackers can exploit this issue to gain access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-55242 |
Exploitation
To exploit this vulnerability, an attacker must be on the same network as the Xbox device. By leveraging low attack complexity, the attacker can send crafted requests that trigger the disclosure of sensitive information. User interaction is required, making it essential for users to be cautious about their network environment.
Affected Products
- Xbox: Vulnerable to unauthorized information disclosure over the network.
Mitigation
To mitigate this vulnerability, users should ensure their Xbox devices are updated with the latest security patches. Additionally, users should avoid connecting their devices to untrusted networks and be vigilant about the information shared over the network.