The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.endress.com | Product |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json | Third Party Advisory |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
29 Jan 2026, 19:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Endress
Endress meac300-fnade4 Firmware Endress meac300-fnade4 |
|
| CPE | cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:endress:meac300-fnade4:-:*:*:*:*:*:*:* |
|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.endress.com - Product | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - Third Party Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf - Third Party Advisory | |
| Summary |
|
03 Jul 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-03 12:15
Updated : 2026-01-29 19:28
NVD link : CVE-2025-27459
Mitre link : CVE-2025-27459
CVE.ORG link : CVE-2025-27459
JSON object : View
Products Affected
endress
- meac300-fnade4_firmware
- meac300-fnade4
CWE
CWE-257
Storing Passwords in a Recoverable Format