Skip to content
OpenAdvisories
Critical ICSA-25-148-04 1 CVE

Instantel Micromate (Update A)

Published May 29, 2025 · Updated Aug 7, 2025 · Revision 2

Vendor: Instantel Product: Micromate

Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to access the device's configuration port and execute commands.

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-1907

    Instantel Micromate Missing Authentication for Critical Function

    Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected.

    Instantel Micromate

Revision history

  1. #2

    Update A - Mitigations section updated to include the patch that is now available, updated the versions affected, and updated language in the advisory.

  2. #1

    Initial Publication

References