Improper Input Validation in Roche Diagnostics navify Monitoring
CVE-2025-7674

7.1HIGH

Key Information:

Vendor

Roche Diagnostics

Status
Navify Monitoring
Vendor
CVE Published:
5 August 2025

What is CVE-2025-7674?

Roche Diagnostics' navify Monitoring is affected by an improper input validation vulnerability, which allows attackers to manipulate input data leading to a denial of service (DoS). This issue arises from flaws in how the software handles incoming data, adversely affecting server performance under certain conditions. It's important to note that this vulnerability does not compromise data confidentiality or integrity. Affected versions are those prior to 1.08.00, and it is crucial for users to update their systems to mitigate potential disruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

navify Monitoring 0 < 1.08.00

References

https://preview-owp.roche.com/content/dam/diagnostics/Blu...
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.