← All advisories

Medium severity6.5NVD Advisory· Published Jul 3, 2025· Updated Jun 17, 2026

CVE-2025-27457

CVE-2025-27457

Description

All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Endress+Hauser/Endress+Hauser MEAC300-FNADE4v5
Range: vers:all/*
SICK AG/VNCllm-create
Endress/Meac300 Fnade4 Firmware
cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

sick.com/psirtnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.jsonnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdfnvdVendor Advisory
www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvdUS Government Resource
www.endress.comnvdProduct
www.first.org/cvss/calculator/3.1nvdNot Applicable

News mentions

0

No linked articles in our index yet.