CVE-2025-55052 MEDIUM

CVE-2025-55052

Vendor Baicells
Product NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227
Weakness CWE-200 · Info exposure
Published September 9, 2025
Last update September 10, 2025
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Key dates

02Disclosure timeline

September 9, 2025 CVE published
September 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-6826 Concrete 9.5.0 and below has file usage disclosure via missing permission check in Usage controller CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies CVE-2021-41090 Instance config inline secret exposure CVE-2024-10285 CE21 Suite <= 2.2.0 - JWT Token Disclosure CVE-2024-45040 gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property