by Kastro
Paper/Archive/CVE-2025-7426

CVE-2025-7426

MINOVA Information Services GmbH TTA — MINOVA TTA Information Disclosure and Credential Exposure

EPSS 0.3%public exploitCVSS 9.3
critical.is priorityof 100
42
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 20.8.208 × 204.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of automated business processes (e.g. EDI or data integration), this could lead to data manipulation, extraction, or abuse.  Debug ports 1602, 1603 and 1636 also expose service architecture information and system activity logs

Affected

ProductAffectedFixed inSource
TTA11.17.0–CNA

Scores by source

NCSC.ch (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refminova.de/de/tta.htmlexploitcryptron.ch/en/blog-detail/security-advisory-CVE-2025-7426-en.html