File System Security Issue in ibaPDA by a Government Vendor
CVE-2025-14988

10CRITICAL

Key Information:

Vendor

Iba Systems

Status
Ibapda
Vendor
CVE Published:
27 January 2026

What is CVE-2025-14988?

A vulnerability in ibaPDA has been discovered that could enable unauthorized actions on the file system under specific conditions. This issue poses a significant risk to the confidentiality, integrity, and availability of the system, potentially allowing attackers to manipulate system files or compromise data integrity. Organizations utilizing ibaPDA should apply the latest security patches to mitigate this threat.

Affected Version(s)

ibaPDA 8.12.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
government-resource

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Siemens reported this vulnerability to CISA.
.