CVE-2025-62575

8.7 highEPSS 0.4%

High (8.7) in mirion biodose\/nmis. EPSS 0.4% chance of exploitation in the next 30 days.

NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have the sysadmin role. This can lead to remote code execution through the use of certain built-in stored procedures.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2025-12-02
Modified: 2026-09-25
Record from: the NVD, synced 2026-10-19

Affected

mirion:biodose\/nmis

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01

Check your stack JSON