CVE-2025-30398

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_7::::::

History

No history.

Information

Published : 2025-11-11 18:15

Updated : 2026-06-29 15:27

NVD link : CVE-2025-30398

Mitre link : CVE-2025-30398

CVE.ORG link : CVE-2025-30398

JSON object : View

Products Affected

microsoft

nuance_powerscribe_360
nuance_powerscribe_one

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-30398", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-30398", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-12T14:40:54.242798Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "secure@microsoft.com", "affectedData": [{"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.1", "versions": [{"status": "affected", "version": "4.0.1", "lessThan": "7.0.111.66", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.2", "versions": [{"status": "affected", "version": "4.0.2", "lessThan": "7.0.154.16", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.3", "versions": [{"status": "affected", "version": "4.0.3", "lessThan": "7.0.197.8", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.4", "versions": [{"status": "affected", "version": "4.0.4", "lessThan": "7.0.212.9", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.5", "versions": [{"status": "affected", "version": "4.0.5", "lessThan": "7.0.243.17", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.6", "versions": [{"status": "affected", "version": "4.0.6", "lessThan": "7.0.277.26", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.7", "versions": [{"status": "affected", "version": "4.0.7", "lessThan": "7.0.316.9", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.8", "versions": [{"status": "affected", "version": "4.0.8", "lessThan": "7.0.427.13", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.9", "versions": [{"status": "affected", "version": "4.0.9", "lessThan": "7.0.528.18", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.1", "versions": [{"status": "affected", "version": "2019.1", "lessThan": "2019.1.96.5", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.10", "versions": [{"status": "affected", "version": "2019.10", "lessThan": "2019.10.36.4", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.2", "versions": [{"status": "affected", "version": "2019.2", "lessThan": "2019.2.9.8", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.3", "versions": [{"status": "affected", "version": "2019.3", "lessThan": "2019.3.16.20", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.4", "versions": [{"status": "affected", "version": "2019.4", "lessThan": "2019.4.9.16", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.5", "versions": [{"status": "affected", "version": "2019.5", "lessThan": "2019.5.14.39", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.6", "versions": [{"status": "affected", "version": "2019.6", "lessThan": "2019.6.36.39", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.7", "versions": [{"status": "affected", "version": "2019.7", "lessThan": "2019.7.107.21", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.8", "versions": [{"status": "affected", "version": "2019.8", "lessThan": "2019.8.43.15", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.9", "versions": [{"status": "affected", "version": "2019.9", "lessThan": "2019.9.31.19", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "PowerScribe One version 2023.1 SP2 Patch 7", "versions": [{"status": "affected", "version": "2023.1", "lessThan": "2023.2.3027.0", "versionType": "custom"}]}]}], "published": "2025-11-11T18:15:35.107", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network."}], "lastModified": "2026-06-29T15:27:36.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A11285B4-4EC6-4BF1-8A1B-47FF97C4FDB6"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "338738D0-96CD-408B-B782-1C5BA01B3753"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B5C5313-39F8-4C4C-A789-E64F2AD7D150"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5E14BBD-F77C-4946-A4C9-143E47299977"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CF04E38-FD09-4B6B-B5CF-F0F49982CF1C"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "463A6A94-C936-44B4-B4B6-6C88A93F1D37"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98EC89A0-23EE-4638-A2C3-4C4D917DA9EE"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67F8EF7B-FE3C-42FE-A00B-40E7CFCDA961"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5B27622-02CA-4374-91B8-52BED59F92EF"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62329468-E85C-4A3C-A0BF-8BA11941DED5"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EDC600D-8637-4BAB-AC7D-A9D95B03DAB9"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47AC5A9D-8016-4BDB-9D8F-098CFD93855A"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B6B794A-C467-411D-9468-A7ADDA7D6157"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "870B35F1-75F2-4EBB-A4C5-F6C3118BBC25"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "548FC39C-8C08-4285-A5FC-0785738C4471"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F44CAAE-A020-4F81-BF96-48F9D6559A7D"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA71CDB3-269C-4EE8-9F46-FD7CC1284B9C"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F374C80B-0336-4687-879B-1745234B9E37"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "682143B4-04BA-4C11-AAE8-E687B6BE4688"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA5407C0-0336-4055-BD18-EA68C7C40218"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}