CVE-2025-40891

LOW EPSS 4.0%

Published Dec 18, 20256mo ago · Modified Jun 17, 20261w ago

2.3 CVSS 4.0

Low

Published Dec 18, 2025 6mo ago

Last Modified Jun 17, 2026 1w ago

Description

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HTML tags into asset attributes across two snapshots. Exploitation requires a victim to use the Time Machine Snapshot Diff feature on those specific snapshots and perform specific GUI actions, at which point the injected HTML renders in their browser, enabling phishing and open redirect attacks. Full XSS exploitation is prevented by input validation and Content Security Policy. Attack complexity is high due to multiple required conditions.

CVSS Details

Base Score

2.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

4.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 2

Vendor	Product	Version	Range
nozominetworks	cmc	*	<25.5.0
nozominetworks	guardian	*	<25.5.0

References 2

cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-827968.html
security.nozominetworks.com https://security.nozominetworks.com/NN-2025:12-01

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.