Authentication Bypass Vulnerability in Instantel Micromate Product
CVE-2025-1907

9.3CRITICAL

Key Information:

Vendor

Instantel

Status
Vendor
CVE Published:
30 May 2025

What is CVE-2025-1907?

The Instantel Micromate product is vulnerable due to a lack of proper authentication on its configuration port. This oversight allows attackers to potentially execute arbitrary commands if they can connect to the device. This vulnerability raises significant security concerns as unauthorized access can lead to manipulation of settings and processes, emphasizing the importance of implementing robust authentication mechanisms.

Affected Version(s)

Micromate All versions

References

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

.
CVE-2025-1907 : Authentication Bypass Vulnerability in Instantel Micromate Product