CVE-2025-5087 — Cleartext Transmission of Sensitive Information in Kaleris Navis N4

CVE-2025-5087

Cleartext Transmission of Sensitive Information in Kaleris Navis N4 PUBLISHED

Description (CNA)

Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials.

Affected (CNA)

Vendor / product	Versions
Kaleris / Navis N4	affected 0 before 4.0

CWE

CWE-319

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.