High · 8.7 CVE-2025-4364 EUVD-2025-15872GHSA-h75v-682v-7r88

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Published May 20, 2025 · Updated May 20, 2025 · Assigned by icscert

Vendor: Assured Telematics Product: Fleet Management System

Description

The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials.

Affected products

Vendor	Product	Affected	Fixed
Assured Telematics	Fleet Management System	< February 6th, 2025	February 6th, 2025

Advisories 1

ICSA-25-140-11 Assured Telematics Inc (ATI) Fleet Management System (Update A) CISA ICS & IT advisories · Jun 10, 2025

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11 government-resource