Mirion Medical

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Mirion Medical records in CISA KEV

No Mirion Medical vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Biodose/nmis 5 records MEDIUM Dmc 3000 Transmitter Firmware 1 record LOW Drm-1/2 Firmware 1 record LOW Drm-2 Firmware 1 record LOW Ipam Transmitter F/dmc 2000 Firmware 1 record LOW Rds-31 Firmware 1 record LOW Rds-31 Itx Firmware 1 record LOW Telepole 2 Firmware 1 record LOW

Records

6 records

TI-2025-38791 CVE-2025-62575 · GHSA-959v-frv4-7fj8

Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource

MEDIUM 40

NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0045 Published 2025-12-02 Fixed in 23.0 CWE-732

TI-2025-38288 CVE-2025-61940 · GHSA-m839-8xgr-vqhm

Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication

MEDIUM 40

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00344 Published 2025-12-02 Fixed in 23.0 CWE-603

TI-2025-39738 CVE-2025-64298 · GHSA-4cpf-vq4f-2rm5

Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource

LOW 39

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00251 Published 2025-12-02 Fixed in 23.0 CWE-732

TI-2025-40112 CVE-2025-64778 · GHSA-2wpc-x967-v5qq

Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials

LOW 35

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00125 Published 2025-12-02 Fixed in 23.0 CWE-798

TI-2025-40009 CVE-2025-64642 · GHSA-884g-x96w-frc5

Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource

LOW 30

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program execu…

CVSS 4.0HIGH 7.1 Local No auth No interaction EPSS 0.00123 Published 2025-12-02 Fixed in 23.0 CWE-732

TI-2017-07044 CVE-2017-9645 · GHSA-wp56-rp8w-8p9w

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000…

LOW 28

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (includin…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0024 Published 2017-09-20 No fix listed CWE-326

Open these records in search →

Critical	0
High	5
Medium	1
Low	0
No CVSS	0