CVE-2025-24481

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.

Metrics

CVSS 4.0 7.0/10CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
Rockwell AutomationFactoryTalk® View Site Edition<V15

References

Timeline

Published
Jan 28, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-244827.0A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissioCVE-2025-244835.5NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially cCVE-2025-244847.8Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticCVE-2025-244857.5A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTCVE-2025-244867.8Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticCVE-2025-244875.3An unauthenticated attacker can infer the existence of usernames in the system by querying an API.CVE-2025-244896.3An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.CVE-2025-24498.8NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers toCVE-2025-244906.5Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statements in the SQL query CVE-2025-244916.7Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: UseCVE-2025-244934.7in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.CVE-2025-244947.2Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular us
CVE-2025-24481: High severity, CVSS 7.0 | Vulnix