CVE-2025-63958

{
  "id": "CVE-2025-63958",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-24T17:16:09.040",
  "lastModified": "2026-11-05T13:10:00.180",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint (/MILLENSYS/settings) that is accessible without authentication. This page leaks plaintext database credentials, file share paths, internal license server configuration, and software update parameters. An unauthenticated attacker can retrieve this information by accessing the endpoint directly, potentially leading to full system compromise. The vulnerability is due to missing access controls on a privileged administrative function."
    },
    {
      "lang": "es",
      "value": "MILLENSYS Vision Tools Workspace 6.5.0.2585 expone un endpoint de configuración sensible (/MILLENSYS/settings) que es accesible sin autenticación. Esta página filtra credenciales de base de datos en texto plano, rutas de recursos compartidos de archivos, configuración del servidor de licencias interno y parámetros de actualización de software. Un atacante no autenticado puede recuperar esta información accediendo directamente al endpoint, lo que podría llevar a un compromiso total del sistema. La vulnerabilidad se debe a la falta de controles de acceso en una función administrativa privilegiada."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-24T19:04:13.591319Z",
          "id": "CVE-2025-63958",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-284"
        },
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:millensys:vision_tools_workspace:5.10.5.2429:*:*:*:*:*:*:*",
              "matchCriteriaId": "97A920CC-D27C-4A7C-93F9-0AF05A95B597"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:millensys:vision_tools_workspace:6.5.0.2585:*:*:*:*:*:*:*",
              "matchCriteriaId": "11AA6384-D827-42D0-970B-808C9C6A2484"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:millensys:vision_tools_workspace:6.5.0.2596:*:*:*:*:*:*:*",
              "matchCriteriaId": "3040C86D-0E4C-453F-9AAC-7BA0E8B230F3"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://ozex.gitlab.io/tricks_hacks/2025-11-19-cve-2025-63958/index.html",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.millensys.com/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}