CVE-2025-64778 — Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials

CVE-2025-64778

Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials PUBLISHED

Description (CNA)

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.

Affected (CNA)

Vendor / product	Versions
Mirion Medical / EC2 Software NMIS BioDose	affected 0 before 23.0; unaffected 23.0

CWE

CWE-798

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.