CVE-2025-8284 — Packet Power EMX and EG Missing Authentication for Critical Function

CVE-2025-8284

Packet Power EMX and EG Missing Authentication for Critical Function PUBLISHED

Description (CNA)

By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms. This vulnerability could allow unauthorized users to access and manipulate monitoring and control functions.

Affected (CNA)

Vendor / product	Versions
Packet Power / EMX	affected 0 before 4.1.0
Packet Power / EG	affected 0 before 4.1.0

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.