ZDI-CAN-28221
MEDIUM 5.0
Overdue
Oct 03, 2025
EmbedThis
EmbedThis is a vendor known for embedded web server and IoT connectivity software used in various networked devices. This vulnerability has a CVSS score of 5.0 and requires adjacent network access with high complexity to exploit, but requires no authentication and results in low-level impacts to confidentiality, integrity, and availability. Security teams should monitor for patches from EmbedThis before the January 31, 2026 deadline and assess exposure in any embedded or IoT devices running their software on local networks.
Advisory Details
Researcher
Discovered by:
Tyler Zars
Reported
October 03, 2025
Deadline
January 31, 2026
75d overdue
CVSS Vector
AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L