by Kastro
Paper/Archive/CVE-2025-14988

CVE-2025-14988

iba Systems ibaPDA — Incorrect Permission Assignment for Critical Resource vulnerability in iba Systems ibaPDA

EPSS 0.4%CVSS 10.0
critical.is priorityof 100
38
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 38.7.387 × 207.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A security issue has been identified in ibaPDA that could allow unauthorized actions on the file system under certain conditions. This may impact the confidentiality, integrity, or availability of the system.

Affected

ProductAffectedFixed inSource
ibaPDA8.12.0–CNA

Scores by source

icscert (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-027-01