This vulnerability (CVE-2025-10464) affects the Senseway product by Birtech Information Technologies Industry and Trade Ltd. Co. It is categorized under CWE-922 (Insecure Storage of Sensitive Information) and CWE-312 (Cleartext Storage of Sensitive Information). The issue allows attackers with low privileges to retrieve embedded sensitive data due to insecure storage practices. The product uses outdated technology, and the vendor has indicated they cannot provide a fix. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and no user interaction required. Confidentiality impact is high, while integrity and availability are unaffected.

The vulnerability allows unauthorized retrieval of sensitive embedded data, potentially leading to exposure of confidential information. Since the confidentiality impact is high, sensitive data could be compromised if exploited. However, there is no impact on integrity or availability. No known exploits are currently reported in the wild.

No official patch or fix is available as the vendor cannot remediate the vulnerability due to outdated technology. Users are advised to contact the manufacturer for guidance and to consider migrating to updated products developed with newer technology to mitigate risk.