Information Disclosure Vulnerability in Electronics Registration Service by EG4 Electronics

CVE-2025-47872

What is CVE-2025-47872?

The product registration endpoint of EG4 Electronics is susceptible to an information disclosure vulnerability. This vulnerability arises from the endpoint's inconsistent response behavior based on the state of the serial number (S/N). It reacts differently when the S/N is valid and unregistered, valid but already registered, or nonexistent in the database. Because the serial numbers are assigned in a sequential manner, an attacker could exploit this behavior to infer the registration status of various S/Ns, potentially leading to unauthorized access to sensitive product registration information.

References