CVE 8.4 HIGH

Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials_CVE-2025-64778

8.4 / 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Description

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.

Basic Information

ID CVE-2025-64778
Source icscert
Published Dec 2, 2025 at 21:09
Modified Dec 2, 2025 at 21:38

Affected Product

Vendor Mirion Medical
Product EC2 Software NMIS BioDose
Affected Versions Mirion Medical EC2 Software NMIS BioDose 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.