What is the CVSS score of EUVD-2025-200321?

EUVD-2025-200321 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.0%.

How to fix or mitigate EUVD-2025-200321?

Within 24 hours: Identify all systems running NMIS/BioDose V22.02 or earlier and isolate them from production networks if possible. Within 7 days: Apply the vendor-released patch to upgrade all affected installations to the patched version. Within 30 days: Conduct a security audit of database access logs and application activity from affected systems for the past 90 days to identify any unauthorized access using the hard-coded credentials; rotate all database passwords and application service account credentials regardless of patch status.

EUVD-2025-200321

| CVE-2025-64778 HIGH

Use of Hard-coded Credentials (CWE-798)

2025-12-02 ics-cert@hq.dhs.gov

Authentication Bypass

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:24 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

23.0

EUVD ID Assigned

Mar 15, 2026 - 14:04 euvd

EUVD-2025-200321

Analysis Generated

Mar 15, 2026 - 14:04 vuln.today

CVE Published

Dec 02, 2025 - 21:15 nvd

HIGH 7.3

DescriptionCVE.org

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.