Hard-coded Credential Vulnerability in SUR-FBD CMMS by SUR-FBD

CVE-2025-3920

What is CVE-2025-3920?

A significant security issue has been discovered in SUR-FBD CMMS, where hard-coded administrative credentials are embedded within a compiled DLL file. This flaw allows an attacker with access to the local system or the application's installation directory to extract these credentials, potentially granting unauthorized administrative control over the application. The vulnerability has been addressed in the release of version 2025.03.27, underscoring the importance of software updates to mitigate such risks.

References