CVE-2025-0674
Published: 07 February 2025
Summary
CVE-2025-0674 is a critical-severity Authentication Bypass Using an Alternate Path or Channel (CWE-288) vulnerability in Cisa (inferred from references). Its CVSS base score is 9.3 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 5.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-2 (Account Management) and AC-3 (Access Enforcement).
Deeper analysis
Multiple Elber products are affected by an authentication bypass vulnerability that permits unauthorized access to password management functionality. The flaw, tracked as CWE-288, enables manipulation of a specific endpoint to overwrite any user password in the system, resulting in a CVSS 4.0 score of 9.3.
Unauthenticated attackers with network access can exploit the issue without user interaction or credentials to obtain administrative control over protected areas of the affected devices, fully compromising system security.
CISA has published ICSA-25-035-03 detailing the vulnerability and associated mitigation guidance for the impacted industrial control systems products.
The EPSS score rose materially from a low baseline to a peak of 0.4503 on 2025-12-11 before receding to the current value of 0.1539, indicating emerging exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-1810
Vulnerability details
Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized…
more
administrative access to protected areas of the application, compromising the device's system security.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Auth bypass on public-facing endpoint directly enables remote exploitation (T1190); password overwrite enables account manipulation for admin access (T1098).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly protects authenticators like passwords from unauthorized disclosure and modification, preventing attackers from overwriting user passwords via endpoint manipulation.
Establishes and enforces account management processes requiring authorization for password changes, mitigating unauthorized access to account modification functions.
Enforces approved access authorizations at the system level, blocking unauthenticated access to password management endpoints.