CVE 7.1 HIGH

CVE-2025-53507_CVE-2025-53507

7.1 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].

Basic Information

ID CVE-2025-53507
Source jpcert
Published Aug 29, 2025 at 04:13

Affected Product

Vendor iND Co.,Ltd
Product HL330-DLS (for module MC7700)
Version firmware version 1.03 and earlier
Affected Versions iND Co.,Ltd HL330-DLS (for module MC7700) firmware version 1.03 and earlier
iND Co.,Ltd HL330-DLS (for module MC7330) firmware version 2.02t and earlier
iND Co.,Ltd HL320-DLS (for module MC7700) firmware version 1.03 and earlier
iND Co.,Ltd HL320-DLS (for module MC7330) firmware version 2.02t and earlier
iND Co.,Ltd LM-100 firmware version 1.02 and earlier
iND Co.,Ltd LM-200 (for module AMP570) firmware version 1.02 and earlier
iND Co.,Ltd LM-200 (for module EC25-J) firmware version 1.05e and earlier
iND Co.,Ltd L2X Assist firmware version 2.01 and earlier
iND Co.,Ltd L2X Assist-RS-A firmware version 1.11 and earlier
iND Co.,Ltd L2X Assist-RS-E firmware version 1.12 and earlier
iND Co.,Ltd F2L Assist-SS-A firmware version 1.03 and earlier
iND Co.,Ltd F2L Assist-SS-E firmware version 1.01 and earlier

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.