CVE-2025-24924

Summary

Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username

Affected Software

Weaknesses

• CWE-306: CWE-306 Missing Authentication for Critical Function

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07

• ←Previous
• Next→