Read the docs
TI-2025-21700 Aliases CVE-2025-30398GHSA-j479-48qc-7rgj

Nuance PowerScribe 360 Information Disclosure Vulnerability

Priority LOW 39CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.

Summary

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00844 58th percentileScored 2026-11-07
Fix Fixed Nuance PowerScribe 360 version 4.0.1 (Microsoft): 7.0.111.66Nuance PowerScribe 360 version 4.0.2 (Microsoft): 7.0.154.16+18 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftNuance PowerScribe 360 version 4.0.14.0.1 to before 7.0.111.667.0.111.66Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.24.0.2 to before 7.0.154.167.0.154.16Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.34.0.3 to before 7.0.197.87.0.197.8Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.44.0.4 to before 7.0.212.97.0.212.9Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.54.0.5 to before 7.0.243.177.0.243.17Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.64.0.6 to before 7.0.277.267.0.277.26Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.74.0.7 to before 7.0.316.97.0.316.9Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.84.0.8 to before 7.0.427.137.0.427.13Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.94.0.9 to before 7.0.528.187.0.528.18Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.12019.1 to before 2019.1.96.52019.1.96.5Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.102019.10 to before 2019.10.36.42019.10.36.4Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.22019.2 to before 2019.2.9.82019.2.9.8Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.32019.3 to before 2019.3.16.202019.3.16.20Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.42019.4 to before 2019.4.9.162019.4.9.16Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.52019.5 to before 2019.5.14.392019.5.14.39Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.62019.6 to before 2019.6.36.392019.6.36.39Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.72019.7 to before 2019.7.107.212019.7.107.21Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.82019.8 to before 2019.8.43.152019.8.43.15Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.92019.9 to before 2019.9.31.192019.9.31.19Patch availableCNA
MicrosoftPowerScribe One version 2023.1 SP2 Patch 72023.1 to before 2023.2.3027.02023.2.3027.0Patch availableCNA
  • Nuance PowerScribe 360 version 4.0.1 VendorMicrosoft Affected 4.0.1 to before 7.0.111.66 Fixed in 7.0.111.66 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.2 VendorMicrosoft Affected 4.0.2 to before 7.0.154.16 Fixed in 7.0.154.16 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.3 VendorMicrosoft Affected 4.0.3 to before 7.0.197.8 Fixed in 7.0.197.8 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.4 VendorMicrosoft Affected 4.0.4 to before 7.0.212.9 Fixed in 7.0.212.9 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.5 VendorMicrosoft Affected 4.0.5 to before 7.0.243.17 Fixed in 7.0.243.17 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.6 VendorMicrosoft Affected 4.0.6 to before 7.0.277.26 Fixed in 7.0.277.26 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.7 VendorMicrosoft Affected 4.0.7 to before 7.0.316.9 Fixed in 7.0.316.9 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.8 VendorMicrosoft Affected 4.0.8 to before 7.0.427.13 Fixed in 7.0.427.13 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.9 VendorMicrosoft Affected 4.0.9 to before 7.0.528.18 Fixed in 7.0.528.18 Patch available CNA
  • Nuance PowerScribe One version 2019.1 VendorMicrosoft Affected 2019.1 to before 2019.1.96.5 Fixed in 2019.1.96.5 Patch available CNA
  • Nuance PowerScribe One version 2019.10 VendorMicrosoft Affected 2019.10 to before 2019.10.36.4 Fixed in 2019.10.36.4 Patch available CNA
  • Nuance PowerScribe One version 2019.2 VendorMicrosoft Affected 2019.2 to before 2019.2.9.8 Fixed in 2019.2.9.8 Patch available CNA
  • Nuance PowerScribe One version 2019.3 VendorMicrosoft Affected 2019.3 to before 2019.3.16.20 Fixed in 2019.3.16.20 Patch available CNA
  • Nuance PowerScribe One version 2019.4 VendorMicrosoft Affected 2019.4 to before 2019.4.9.16 Fixed in 2019.4.9.16 Patch available CNA
  • Nuance PowerScribe One version 2019.5 VendorMicrosoft Affected 2019.5 to before 2019.5.14.39 Fixed in 2019.5.14.39 Patch available CNA
  • Nuance PowerScribe One version 2019.6 VendorMicrosoft Affected 2019.6 to before 2019.6.36.39 Fixed in 2019.6.36.39 Patch available CNA
  • Nuance PowerScribe One version 2019.7 VendorMicrosoft Affected 2019.7 to before 2019.7.107.21 Fixed in 2019.7.107.21 Patch available CNA
  • Nuance PowerScribe One version 2019.8 VendorMicrosoft Affected 2019.8 to before 2019.8.43.15 Fixed in 2019.8.43.15 Patch available CNA
  • Nuance PowerScribe One version 2019.9 VendorMicrosoft Affected 2019.9 to before 2019.9.31.19 Fixed in 2019.9.31.19 Patch available CNA
  • PowerScribe One version 2023.1 SP2 Patch 7 VendorMicrosoft Affected 2023.1 to before 2023.2.3027.0 Fixed in 2023.2.3027.0 Patch available CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:*4.0.7VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:*4.0.8VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:*4.0.9VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:*2019.1VulnerableMicrosoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:* Versions 2019.1 Vulnerable ·Microsoft
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:*2019.2VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:*2019.3VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:*2019.4VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:*2019.5VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:*2019.6VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:*2019.7VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:*2019.8VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:*2019.9VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:*2019.10VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_7:*:*:*:*:*:*2023.1 sp2_patch_7VulnerableMicrosoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:* Versions 2019.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:* Versions 2019.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:* Versions 2019.4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:* Versions 2019.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:* Versions 2019.6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:* Versions 2019.7 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:* Versions 2019.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:* Versions 2019.9 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:* Versions 2019.10 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_7:*:*:*:*:*:* Versions 2023.1 sp2_patch_7 Vulnerable ·Microsoft

Remediation

  • Fix · CNA Nuance PowerScribe 360 version 4.0.1 (Microsoft) Fixed in 7.0.111.66
  • Fix · CNA Nuance PowerScribe 360 version 4.0.2 (Microsoft) Fixed in 7.0.154.16
  • Fix · CNA Nuance PowerScribe 360 version 4.0.3 (Microsoft) Fixed in 7.0.197.8
  • Fix · CNA Nuance PowerScribe 360 version 4.0.4 (Microsoft) Fixed in 7.0.212.9
  • Fix · CNA Nuance PowerScribe 360 version 4.0.5 (Microsoft) Fixed in 7.0.243.17
  • Fix · CNA Nuance PowerScribe 360 version 4.0.6 (Microsoft) Fixed in 7.0.277.26
  • Fix · CNA Nuance PowerScribe 360 version 4.0.7 (Microsoft) Fixed in 7.0.316.9
  • Fix · CNA Nuance PowerScribe 360 version 4.0.8 (Microsoft) Fixed in 7.0.427.13
  • Fix · CNA Nuance PowerScribe 360 version 4.0.9 (Microsoft) Fixed in 7.0.528.18
  • Fix · CNA Nuance PowerScribe One version 2019.1 (Microsoft) Fixed in 2019.1.96.5
  • Fix · CNA Nuance PowerScribe One version 2019.10 (Microsoft) Fixed in 2019.10.36.4
  • Fix · CNA Nuance PowerScribe One version 2019.2 (Microsoft) Fixed in 2019.2.9.8
  • Fix · CNA Nuance PowerScribe One version 2019.3 (Microsoft) Fixed in 2019.3.16.20
  • Fix · CNA Nuance PowerScribe One version 2019.4 (Microsoft) Fixed in 2019.4.9.16
  • Fix · CNA Nuance PowerScribe One version 2019.5 (Microsoft) Fixed in 2019.5.14.39
  • Fix · CNA Nuance PowerScribe One version 2019.6 (Microsoft) Fixed in 2019.6.36.39
  • Fix · CNA Nuance PowerScribe One version 2019.7 (Microsoft) Fixed in 2019.7.107.21
  • Fix · CNA Nuance PowerScribe One version 2019.8 (Microsoft) Fixed in 2019.8.43.15
  • Fix · CNA Nuance PowerScribe One version 2019.9 (Microsoft) Fixed in 2019.9.31.19
  • Fix · CNA PowerScribe One version 2023.1 SP2 Patch 7 (Microsoft) Fixed in 2023.2.3027.0

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Information Disclosure
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely
ProductStatusPlan or fix
Nuance PowerScribe 360 version 4.0.1Fixed 7.0.111.66 · Security Update
Nuance PowerScribe 360 version 4.0.2Fixed 7.0.154.16 · Security Update
Nuance PowerScribe 360 version 4.0.3Fixed 7.0.197.8 · Security Update
Nuance PowerScribe 360 version 4.0.4Fixed 7.0.212.9 · Security Update
Nuance PowerScribe 360 version 4.0.5Fixed 7.0.243.17 · Security Update
Nuance PowerScribe 360 version 4.0.6Fixed 7.0.277.26 · Security Update
Nuance PowerScribe 360 version 4.0.7Fixed 7.0.316.9 · Security Update
Nuance PowerScribe 360 version 4.0.8Fixed 7.0.427.13 · Security Update
Nuance PowerScribe 360 version 4.0.9Fixed 7.0.528.18 · Security Update
Nuance PowerScribe One version 2019.1Fixed 2019.1.96.5 · Security Update
Nuance PowerScribe One version 2019.10Fixed 2019.10.36.4 · Security Update
Nuance PowerScribe One version 2019.2Fixed 2019.2.9.8 · Security Update
Nuance PowerScribe One version 2019.3Fixed 2019.3.16.20 · Security Update
Nuance PowerScribe One version 2019.4Fixed 2019.4.9.16 · Security Update
Nuance PowerScribe One version 2019.5Fixed 2019.5.14.39 · Security Update
Nuance PowerScribe One version 2019.6Fixed 2019.6.36.39 · Security Update
Nuance PowerScribe One version 2019.7Fixed 2019.7.107.21 · Security Update
Nuance PowerScribe One version 2019.8Fixed 2019.8.43.15 · Security Update
Nuance PowerScribe One version 2019.9Fixed 2019.9.31.19 · Security Update
PowerScribe One version 2023.1 SP2 Patch 7Fixed 2023.2.3027.0 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-30398
  2. 2026-10-03 Alias added: GHSA-j479-48qc-7rgj

References

Patch 1

  • TI-2026-21134 Nuance PowerScribe Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences