TI-2025-38791 CVE-2025-62575 · GHSA-959v-frv4-7fj8
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority MEDIUM 40
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.
Mirion Medical
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Mirion Medical records in CISA KEVNo Mirion Medical vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Biodose/nmis · all components
TI-2025-38288 CVE-2025-61940 · GHSA-m839-8xgr-vqhm
Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication
Priority MEDIUM 40
NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database.
TI-2025-39738 CVE-2025-64298 · GHSA-4cpf-vq4f-2rm5
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority LOW 39
NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs.
TI-2025-40112 CVE-2025-64778 · GHSA-2wpc-x967-v5qq
Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials
Priority LOW 35
NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords.
TI-2025-40009 CVE-2025-64642 · GHSA-884g-x96w-frc5
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority LOW 30
NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program execu…