CVE-2025-27457

7.5 highEPSS 0.3%

High (7.5) in endress meac300-fnade4 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2025-07-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19