4 matches found
CVE-2025-20164
CVE-2025-20164 affects Cisco IOS Software’s Industrial Ethernet Switch DM. The issue is insufficient authorization validation, allowing an authenticated, remote attacker with valid credentials (privilege level 5+; read-only DM users are level 5) to send a crafted HTTP request and escalate to priv...
8.3CVSS8.2AI score0.0032EPSS
SaveExploits0References1
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to incorrect authorization, allows a perpetrator to increase their privileges.
The vulnerability of the software products developed by OOO “NPO “MIR” is related to incorrect authorization. Exploiting this vulnerability can allow attackers to enhance their privileges...
8.2CVSS5.5AI score
SaveExploits0Affected Software3
20