CVE Watch—

CVE-2025-48928

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

CVSS

—

Sem CVSS

EPSS

0.6%

p48

KEV

SIM

1 de jul. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

0.6%EPSS · 30 dias0.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

TeleMessage / TM SGNL

Vulnerabilidade

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

Adicionado ao KEV

1 de jul. de 2025

Corrigir até

22 de jul. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48928

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-48927—

96.2%

KEV—79TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability—CVE-2025-47729—

39.0%

KEV—62TeleMessage TM SGNL Hidden Functionality Vulnerability—