Vulnerabilities

TI-2025-09647 CVE-2025-10542 · GHSA-35hw-x784-33fr

Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM

HIGH 82

iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00777 Published 2025-09-25 No fix listed CWE-1392

TI-2025-09646 CVE-2025-10541 · GHSA-mw5x-5ggx-p642

Local Privilege Escalation via Insecure Update Mechanism in iMonitor EAM

HIGH 69

iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0022 Published 2025-09-25 No fix listed CWE-732

TI-2025-09645 CVE-2025-10540 · GHSA-2r7c-ggmc-xvcq

Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM

LOW 28

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00125 Published 2025-09-25 No fix listed CWE-319

Vulnerabilities

Filters

Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM

Local Privilege Escalation via Insecure Update Mechanism in iMonitor EAM

Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM