by Kastro
Paper/Archive/CVE-2025-49851

CVE-2025-49851

ControlID iDSecure On-premises — Improper Authentication in ControlID iDSecure On-premises

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.2.472 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

Affected

ProductAffectedFixed inSource
iDSecure On-premises≤ 4.7.48.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcisa.gov/news-events/ics-advisories/icsa-25-175-05