What is the CVSS score of CVE-2025-14480?

CVE-2025-14480 has a CVSS 3.1 base score of 5.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Aspera Faspio Gateway are affected by CVE-2025-14480?

CVE-2025-14480 presents moderate security risk, a broken cryptography vulnerability rated CVSS 5.1. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-14480?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Aspera Faspio Gateway CVE-2025-14480

MEDIUM

Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

2026-03-03 psirt@us.ibm.com

IBM Aspera Faspio Gateway

5.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.1 MEDIUM

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 21:15 nvd

MEDIUM 5.1

DescriptionCVE.org

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information

AnalysisAI

Aspera Faspio Gateway versions up to 1.3.6 is affected by use of a broken or risky cryptographic algorithm (CVSS 5.1).

Technical ContextAI

This vulnerability (CWE-327: Use of a Broken or Risky Cryptographic Algorithm) affects Aspera Faspio Gateway. IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information