CVE-2025-27459

MEDIUM

CVE-2025-27459

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-27459 has a selected CVSS score of 4.4 (medium).

Description

The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 3, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Endress+Hauser MEAC300-FNADE4

Browse Endress+Hauser / Endress+Hauser MEAC300-FNADE4

Default status: affected

CVE Listvers:all/*affected

References

7