by Kastro
Paper/Archive/CVE-2025-8284

CVE-2025-8284

Packet Power EMX — Packet Power EMX and EG Missing Authentication for Critical Function

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.9.469 × 209.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms. This vulnerability could allow unauthorized users to access and manipulate monitoring and control functions.

Affected

ProductAffectedFixed inSource
EMX< 4.1.04.1.0CNA
EG< 4.1.04.1.0CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refcisa.gov/news-events/ics-advisories/icsa-25-219-05