TI-2025-38791 CVE-2025-62575 · GHSA-959v-frv4-7fj8
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority MEDIUM 40
NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.
Vulnerabilities
5 records
TI-2025-40112 CVE-2025-64778 · GHSA-2wpc-x967-v5qq
Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials
Priority LOW 35
NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords.
TI-2025-38288 CVE-2025-61940 · GHSA-m839-8xgr-vqhm
Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication
Priority MEDIUM 40
NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database.
TI-2025-39738 CVE-2025-64298 · GHSA-4cpf-vq4f-2rm5
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority LOW 39
NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked installs.
TI-2025-40009 CVE-2025-64642 · GHSA-884g-x96w-frc5
Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource
Priority LOW 30
NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program execu…