Vulnerability Description
Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sigb | Pmb | <= 4.2.13 |
Related Weaknesses (CWE)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-Third Party Advisory
FAQ
What is CVE-2025-0472?
CVE-2025-0472 is a vulnerability with a CVSS score of 7.5 (HIGH). Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine ...
How severe is CVE-2025-0472?
CVE-2025-0472 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-0472?
Check the references section above for vendor advisories and patch information. Affected products include: Sigb Pmb.