What is the CVSS score of CVE-2025-69929?

CVE-2025-69929 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2025-69929?

Yes, a public proof-of-concept exploit is available for CVE-2025-69929. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-69929?

Within 24 hours: Inventory all systems running Web User Interface versions up to 1.21.6-230825.1720 and isolate affected instances from production networks if operationally feasible. Within 7 days: Implement network segmentation to restrict UI access, enforce multi-factor authentication, and monitor access logs for suspicious activity. Within 30 days: Contact vendor for patch availability timeline; if patch released, schedule immediate deployment; if no patch forthcoming, evaluate alternative solutions or consider decommissioning affected components.

Web User Interface CVE-2025-69929

CRITICAL

Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

2026-01-29 cve@mitre.org

Privilege Escalation Web User Interface

9.8

CVSS 3.1 · Vendor: mitre

View

Vulnerability Assessment

Weakness	CWE CWE-327 OWASP Top 10:2025 A04:2025 - Cryptographic Failures ASVS 5.0 V11 - Cryptography Approved algorithm selection
Impact	CVSS 9.8. N3uron is an IIoT/SCADA platform — privilege escalation in industrial systems is high-severity.
Exploit ScenarioDerived	Attacker intercepts or reverse-engineers the client-side hashing, forges admin credentials to access the SCADA platform.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Client-side password hashing in N3uron Web UI v1.21.7 allows privilege escalation. Weak hashing enables attackers to forge authentication credentials. PoC available.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 22:00 CVSS 9.8

Weak client-side password hashing in N3uron SCADA platform.

RemediationAI

Update N3uron. Implement server-side password hashing.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-327 broken cryptography. Password hashing performed client-side enables credential forgery.

Know when Web User Interface gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (mitre) PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Feb 27, 2026 - 18:16 vuln.today

Public exploit code

CVE Published

Jan 29, 2026 - 20:16 nvd

CRITICAL 9.8

DescriptionCVE.org

An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format

Executive ViewAI

Why It Matters

A critical vulnerability (CVE-2025-69929) affecting Web User Interface versions up to 1.21.6-230825.1720 exploits weak cryptographic implementation, enabling attackers to compromise authentication and data confidentiality. With a public exploit available and no patch currently released, organizations running affected versions face immediate risk of unauthorized access and data breach.

Business Impact: Severe

Compensating Controls

Deploy Web Application Firewall (WAF) rules to block exploitation patterns; restrict network access to UI via IP allowlisting and VPN; enforce certificate pinning where applicable; implement enhanced logging and real-time alerting on authentication failures; disable non-essential cryptographic features if UI functionality permits; apply defense-in-depth with additional authentication layers (MFA); monitor vendor advisories for patch release schedule.

Threat Intelligence Overview

EPSS Score

0.1%

Top 74% exploitable

Exploit

POC

Public exploit code exists

Data Quality

4 sources

Confidence: Medium

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact

Very High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +49

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Privilege Escalation HIGH

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.