CVE-2025-0941 - Vulnerability Details - OpenCVE

MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00043.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2025-5301	MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users.

Fixes

Solution

The vulnerability has been fixed in software version 1.0.42. To upgrade to this software version, contact your authorized Beckman Coulter Field Service Representative.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.beckman.com/about-us/compliance/coordinated-vulnerability-disclosure/product-security-updates

History

Tue, 04 Mar 2025 03:45:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 26 Feb 2025 16:45:00 +0000

Type	Values Removed	Values Added
Description		MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users.
Title		MET ONE 3400+ Potential Credential Exposure
Weaknesses		CWE-209
References		https://www.beckman.com/about-us/compliance/coordinated-vulnerability-disclosure/product-security-updates
Metrics		cvssV3_1 `{'score': 5.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: BECLS

Published: 2025-02-26T16:28:36.746Z

Updated: 2025-02-26T17:02:46.560Z

Reserved: 2025-01-31T18:24:30.272Z

Link: CVE-2025-0941

Vulnrichment

Updated: 2025-02-26T17:02:37.925Z

NVD

Status : Received

Published: 2025-02-26T17:15:21.910

Modified: 2025-02-26T17:15:21.910

Link: CVE-2025-0941

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-209

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0941", "assignerOrgId": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db", "state": "PUBLISHED", "assignerShortName": "BECLS", "dateReserved": "2025-01-31T18:24:30.272Z", "datePublished": "2025-02-26T16:28:36.746Z", "dateUpdated": "2025-02-26T17:02:46.560Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MET ONE 3400+", "vendor": "Beckman Coulter Life Sciences", "versions": [{"status": "affected", "version": "1.0.41"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users. </p>\n\n\n<p></p>"}], "value": "MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users."}], "impacts": [{"capecId": "CAPEC-560", "descriptions": [{"lang": "en", "value": "CAPEC-560 Use of Known Domain Credentials"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db", "shortName": "BECLS", "dateUpdated": "2025-02-26T16:28:36.746Z"}, "references": [{"url": "https://www.beckman.com/about-us/compliance/coordinated-vulnerability-disclosure/product-security-updates"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The vulnerability has been fixed in software version 1.0.42. To upgrade to this software version, contact your authorized Beckman Coulter Field Service Representative.</p>"}], "value": "The vulnerability has been fixed in software version 1.0.42. To upgrade to this software version, contact your authorized Beckman Coulter Field Service Representative."}], "source": {"discovery": "UNKNOWN"}, "title": "MET ONE 3400+ Potential Credential Exposure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-26T17:02:29.812769Z", "id": "CVE-2025-0941", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-26T17:02:46.560Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0941", "assignerOrgId": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db", "state": "PUBLISHED", "assignerShortName": "BECLS", "dateReserved": "2025-01-31T18:24:30.272Z", "datePublished": "2025-02-26T16:28:36.746Z", "dateUpdated": "2025-02-26T17:02:46.560Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MET ONE 3400+", "vendor": "Beckman Coulter Life Sciences", "versions": [{"status": "affected", "version": "1.0.41"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users. </p>\n\n\n<p></p>"}], "value": "MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users."}], "impacts": [{"capecId": "CAPEC-560", "descriptions": [{"lang": "en", "value": "CAPEC-560 Use of Known Domain Credentials"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db", "shortName": "BECLS", "dateUpdated": "2025-02-26T16:28:36.746Z"}, "references": [{"url": "https://www.beckman.com/about-us/compliance/coordinated-vulnerability-disclosure/product-security-updates"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The vulnerability has been fixed in software version 1.0.42. To upgrade to this software version, contact your authorized Beckman Coulter Field Service Representative.</p>"}], "value": "The vulnerability has been fixed in software version 1.0.42. To upgrade to this software version, contact your authorized Beckman Coulter Field Service Representative."}], "source": {"discovery": "UNKNOWN"}, "title": "MET ONE 3400+ Potential Credential Exposure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0941", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-26T17:02:29.812769Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-26T17:02:37.925Z"}}]}}