What is the CVSS score of CVE-2025-60967?

CVE-2025-60967 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of Sonoma D12 Firmware are affected by CVE-2025-60967?

EndRun Technologies Sonoma D12 GPS Network Time Server (v4.00) contains a cross-site scripting vulnerability allowing authenticated users with low privileges to steal session tokens and sensitive…

How to fix or mitigate CVE-2025-60967?

24 hours: Inventory all Sonoma D12 appliances with firmware 6010-0076-000 v4.00 and restrict web management interface access to dedicated administrative subnets. 7 days: Disable the web management interface if operationally feasible, or implement network-based input validation (WAF) to block XSS payloads. 30 days: Contact EndRun Technologies for patch timeline or evaluate replacement with patched firmware version.

Sonoma D12 Firmware CVE-2025-60967

HIGH

Cross-site Scripting (XSS) (CWE-79)

2025-10-06 cve@mitre.org

XSS Sonoma D12 Firmware

7.3

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.3 HIGH

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 02:44 vuln.today

DescriptionCVE.org

Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.

AnalysisAI

Cross-site scripting in the EndRun Technologies Sonoma D12 GPS Network Time Server (firmware 6010-0076-000, version 4.00) lets an attacker inject script into the appliance's web management interface, executing in the browser of an authenticated operator who views the malicious content and enabling theft of session data and sensitive configuration information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R) indicates a remote, low-complexity attack that requires low-privilege access to inject and victim interaction to trigger. No public exploit identified at time of analysis, though a third-party research advisory (xdiv-sec) documents the finding; EPSS is low at 0.28% (20th percentile).