CVE-2025-5893

CRITICAL EPSS 33.8%

Published Jun 9, 20251y ago · Modified Jun 17, 20262w ago

9.3 CVSS 4.0

Critical

Published Jun 9, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Smart Parking Management System from Honding Technology has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access a specific page and obtain plaintext administrator credentials.

CVSS Details

Base Score

9.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

33.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-256

CWE-497

References 2

twcert.org.tw https://www.twcert.org.tw/en/cp-139-10169-651d6-2.html
twcert.org.tw https://www.twcert.org.tw/tw/cp-132-10167-39c6d-1.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.