CVE-2025-10540

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://r.sec-consult.com/imonitor
http://seclists.org/fulldisclosure/2025/Sep/72

Configurations

No configuration.

History

11 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) iMonitor EAM 9.6394 transmite la comunicación entre el agente cliente EAM y el servidor EAM, así como entre el software de gestión del monitor EAM y el servidor, en texto plano sin autenticación ni cifrado. Un atacante con acceso a la red puede interceptar información sensible (como credenciales, datos de registrador de teclas, e información de identificación personal) y manipular el tráfico. Esto permite tanto la divulgación no autorizada como la modificación de datos, incluyendo la emisión de comandos arbitrarios a los agentes cliente.

Information

Published : 2025-09-25 14:15

Updated : 2026-10-11 20:10

NVD link : CVE-2025-10540

Mitre link : CVE-2025-10540

CVE.ORG link : CVE-2025-10540

JSON object : View

Products Affected

No product.

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2025-10540", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10540", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-25T18:55:39.003561Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "affected": [{"source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "affectedData": [{"vendor": "iMonitor Software Inc.", "product": "iMonitor EAM", "versions": [{"status": "affected", "version": "9.63.94"}], "defaultStatus": "unknown"}]}], "published": "2025-09-25T14:15:42.203", "references": [{"url": "https://r.sec-consult.com/imonitor", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "http://seclists.org/fulldisclosure/2025/Sep/72", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents."}, {"lang": "es", "value": "iMonitor EAM 9.6394 transmite la comunicaci\u00f3n entre el agente cliente EAM y el servidor EAM, as\u00ed como entre el software de gesti\u00f3n del monitor EAM y el servidor, en texto plano sin autenticaci\u00f3n ni cifrado. Un atacante con acceso a la red puede interceptar informaci\u00f3n sensible (como credenciales, datos de registrador de teclas, e informaci\u00f3n de identificaci\u00f3n personal) y manipular el tr\u00e1fico. Esto permite tanto la divulgaci\u00f3n no autorizada como la modificaci\u00f3n de datos, incluyendo la emisi\u00f3n de comandos arbitrarios a los agentes cliente."}], "lastModified": "2026-10-11T20:10:00.200", "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf"}