High severity8.3NVD Advisory· Published Dec 2, 2025· Updated Jun 17, 2026

CVE-2025-62575

Description

NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mirion Technologies/Biodose\/nmis
cpe:2.3:a:mirion:biodose\/nmis:*:*:*:*:*:*:*:*
Range: <23.0
NMIS/BioDosellm-fuzzy
Range: <=22.02
Microsoft/SQL Serverllm-fuzzy
Mirion Medical/EC2 Software NMIS BioDosev5
Range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000