Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
Priority LOW 30CWE-313Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00139 3rd percentileScored 2026-11-07
Fix Fixed MicroServer (Columbia Weather Systems): MS_4.1_14142
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Columbia Weather Systems | MicroServer | before MS_4.1_14142 | MS_4.1_14142 | Patch available | CNA |
- MicroServer VendorColumbia Weather Systems Affected before MS_4.1_14142 Fixed in MS_4.1_14142 Patch available CNA
Remediation
- Fix · CNA MicroServer (Columbia Weather Systems) Fixed in MS_4.1_14142
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Columbia Weather Systems MicroServer MS_4.1_14142
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-41015 Columbia Weather Systems MicroServer Command Shell in Externally Accessible DirectoryPriority MEDIUM 40
- TI-2025-38287 Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended EndpointsPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2025-64305
- 2026-10-03 Alias added: GHSA-9crg-j5q8-hwv3
References
Sources
- CVE-2025-64305 · CVE Program
- CVE-2025-64305 · NVD
- FIRST EPSS
- GHSA-9crg-j5q8-hwv3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences