CVE-2026-25601

{
  "id": "CVE-2026-25601",
  "sourceIdentifier": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
  "published": "2026-04-01T12:16:02.587",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability was identified in MEPIS RM, an industrial\nsoftware product developed by Metronik. The application contained a hardcoded\ncryptographic key within the Mx.Web.ComponentModel.dll component. When the\noption to store domain passwords was enabled, this key was used to encrypt user\npasswords before storing them in the application’s database. An attacker with\nsufficient privileges to access the database could extract the encrypted\npasswords, decrypt them using the embedded key, and gain unauthorized access to\nthe associated ICS/OT environment."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad fue identificada en MEPIS RM, un producto de software industrial desarrollado por Metronik. La aplicación contenía una clave criptográfica codificada de forma rígida dentro del componente Mx.Web.ComponentModel.dll. Cuando la opción de almacenar contraseñas de dominio estaba habilitada, esta clave se utilizaba para cifrar las contraseñas de los usuarios antes de almacenarlas en la base de datos de la aplicación. Un atacante con privilegios suficientes para acceder a la base de datos podría extraer las contraseñas cifradas, descifrarlas utilizando la clave incrustada y obtener acceso no autorizado al entorno ICS/OT asociado."
    }
  ],
  "affected": [
    {
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "affectedData": [
        {
          "vendor": "Metronik d.o.o.",
          "product": "MEPIS RM",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "8.2.0107",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "8.2.0007 build 15",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 6.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.5,
        "impactScore": 5.9
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-01T12:34:39.978813Z",
          "id": "CVE-2026-25601",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:metronik:mepis_rm:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "8.2.017",
              "matchCriteriaId": "F1D97A10-22CB-4C9C-8581-433F771F6958"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:metronik:mepis_rm:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "8.2.0007",
              "matchCriteriaId": "641D46CD-B882-4EE3-B5FD-52ED712EF323"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:metronik:mepis_rm:8.2.0007:-:*:*:*:*:*:*",
              "matchCriteriaId": "98B6B64E-528D-47F0-B6F8-8FF5859144C0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.cert.si/en/cve-2026-25601/",
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "tags": [
        "Broken Link"
      ]
    }
  ]
}