Authentication Bypass in Packet Power Monitoring and Control Web Interface
CVE-2025-8284

9.3CRITICAL

Key Information:

Vendor

Packet Power

Status
Emx
Eg
Vendor
CVE Published:
8 August 2025

What is CVE-2025-8284?

The Packet Power Monitoring and Control Web Interface lacks essential authentication mechanisms, enabling unauthorized users to gain access and control over critical monitoring and control functions. This serious flaw presents significant risks, as it can lead to unauthorized manipulation of system settings and data, potentially compromising system integrity and security.

Affected Version(s)

EG 0 < 4.1.0

EMX 0 < 4.1.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-2...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anthony Rose and Jacob Krasnov of BC Security reported this vulnerability to CISA.
.
CVE-2025-8284 : Authentication Bypass in Packet Power Monitoring and Control Web Interface