Threats Tagged 'cve-2025-64642'

CVE-2025-64642 is a high-severity vulnerability in Mirion Medical's EC2 Software NMIS BioDose (version 22.02 and earlier) where installation directories have insecure file permissions. This misconfiguration allows local users on client workstations to modify critical program executables and libraries without requiring authentication or user interaction. Exploiting this vulnerability could lead to privilege escalation, code tampering, or disruption of medical dose measurement operations. Although no known exploits are reported in the wild yet, the vulnerability poses a significant risk to the integrity and availability of the affected software. European healthcare organizations using this software are particularly at risk due to the critical nature of medical radiation dose monitoring. Mitigation requires immediate review and correction of file permissions on installation directories, restricting write access to trusted administrators only. Countries with advanced healthcare infrastructure and known deployments of Mirion Medical products, such as Germany, France, the UK, and the Netherlands, are most likely to be impacted. Given the ease of local exploitation and high impact on system integrity and availability, this vulnerability is rated as high severity. Defenders should prioritize patching or applying configuration hardening to prevent unauthorized modifications.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-64642#cwe-732