CVE-2025-64642 — Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource

CVE-2025-64642

Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource PUBLISHED

Description (CNA)

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries.

Affected (CNA)

Vendor / product	Versions
Mirion Medical / EC2 Software NMIS BioDose	affected 0 before 23.0

CWE

CWE-732

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.