Vulnerability Information 2025

Vulnerability List

Release Date	Database ID	Affected products	Affected customers	Description	Reporter
Mar. 25, 2025	JVNVU#91154745	CHOCO TEI WATCHER mini (IB-MCT001) all versions	Customers using affected CHOCO TEI WATCHER mini	CHOCO TEI WATCHER mini provided by Inaba Denki Sangyo Co., Ltd. contains multiple vulnerabilities listed below. (PDF, Text in Japanese.) 1. Use of client-side authentication 2. Storing passwords in a recoverable format 3. Weak password requirements 4. Forced browsing	These vulnerabilities were discovered by: Andrea Palanca of Nozomi Networks
	CVE-2025-24517
	CVE-2025-24852
	CVE-2025-25211
	CVE-2025-26689
Mar. 24, 2025	JVN#17260367	HMI VeiwJet C-more series: EA7-S6M-S EA7-S6C-S EA7-T6C-S EA7-T8C-S EA7-T10C-S EA7-T10C-SG EA7-T12C-S EA7-T15C-S	Customers using affected HMIs	HMI View Jet C-more series contain multiple vulnerabilities listed below. 1. Clickjacking vulnerability in Web service 2. Denial-of-service (DoS) vulnerability 3. FTP Bounce Vulnerability 4. Weak encoding of credentials stored in project files	JTEKT ELECTRONICS Quality Control Dept.
	CVE-2025-24310
	CVE-2025-26401
	CVE-2025-24317
	CVE-2025-25061
Mar. 24, 2025	JVN#83462467	HMI GC-A2 series: GC-A22W-CW GC-A24W-C(W) GC-A26W-C(W) GC-A24 GC-A24-M GC-A25 GC-A26 GC-A26-J2 GC-A27-C GC-A28-C	Customers using affected HMIs	HMI GC-A2 series contain multiple vulnerabilities listed below. 1. FTP Bounce Vulnerability 2. Denial-of-service (DoS) vulnerability	JTEKT ELECTRONICS Quality Control Dept.
	CVE-2025-24317
	CVE-2025-25061