CVE-2025-49151

The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-06-25

Last modified

2025-07-17

Weaknesses

CWE-547

Affected products

• Nmp Web (Microsens)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07