Vulnerabilities

TI-2025-31233 CVE-2025-49153 · GHSA-j5hw-6f92-5gw9

Path Traversal in MICROSENS NMP Web+

MEDIUM 49

The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00738 Published 2025-06-25 No fix listed CWE-22

TI-2025-31232 CVE-2025-49152 · GHSA-hv2j-4g9f-chqp

MEDIUM 44

The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00492 Published 2025-06-25 No fix listed CWE-613

TI-2025-31231 CVE-2025-49151 · GHSA-qcp5-jccp-3p6h

MEDIUM 49

The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00599 Published 2025-06-25 No fix listed CWE-547