What is CVE-2025-1501?

CVE-2025-1501 is a medium-severity vulnerability in Nozomi Networks Cmc, classified under Incorrect Authorization. CVSS score: 4.3/10. Published 2025-08-26.

How severe is CVE-2025-1501?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Nozomi Networks Cmc

CVE-2025-1501

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download trace files due to improper access restrictions, potentially exposing unauthorized network data.

Vulnerability class: Broken Access Control

EPSS: 0.002 (10.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Nozomi Networks Cmc — versions 0

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

prodsec@nozominetworks.com

Frequently asked questions

What is CVE-2025-1501?: CVE-2025-1501 is a medium-severity vulnerability in Nozomi Networks Cmc, classified under Incorrect Authorization. CVSS score: 4.3/10. Published 2025-08-26.
How severe is CVE-2025-1501?: Medium severity. CVSS v3 base score is 4.3 out of 10.