Threats Tagged 'cve-2025-62575'
View all threats tagged with 'cve-2025-62575'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-62575'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-62575 is a high-severity vulnerability in Mirion Medical's EC2 Software NMIS BioDose, affecting versions up to V22.02. The issue arises because the SQL Server user account 'nmdbuser' and other created accounts are assigned the sysadmin role by default, granting excessive privileges. This misconfiguration allows remote attackers to execute arbitrary code via certain built-in stored procedures without requiring user interaction or high authentication levels. The vulnerability has a CVSS 4.0 score of 8.7, indicating a significant risk to confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the ease of exploitation and critical access level make it a pressing concern. European healthcare and medical research organizations using this software are particularly at risk due to the sensitive nature of the data and regulatory requirements. Mitigation requires immediate privilege reduction for SQL accounts, strict access controls, and monitoring of database activities. Join the discussion | CVE Database V5 | 12/02/2025, 21:11:20 UTC Added: 12/02/2025, 21:16:27 UTC |
Showing 1 to 1 of 1 result