What is CVE-2025-25061?

CVE-2025-25061 is a medium-severity vulnerability in Jtekt Electronics Corporation Hmi Gc-A2 Series, classified under Unintended Proxy or Intermediary (Confused Deputy). CVSS score: 5.8/10. Published 2025-04-04.

How severe is CVE-2025-25061?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Vulnerability in Jtekt Electronics Corporation Hmi Gc-A2 Series

CVE-2025-25061

Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.

EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Jtekt Electronics Corporation Hmi Gc-a2 Series — versions All versions
Jtekt Electronics Corporation Hmi Viewjet C-more Series — versions All versions

Weakness classification (CWE)

CWE-441 — Unintended Proxy or Intermediary (Confused Deputy)

References

Frequently asked questions

What is CVE-2025-25061?: CVE-2025-25061 is a medium-severity vulnerability in Jtekt Electronics Corporation Hmi Gc-A2 Series, classified under Unintended Proxy or Intermediary (Confused Deputy). CVSS score: 5.8/10. Published 2025-04-04.
How severe is CVE-2025-25061?: Medium severity. CVSS v3 base score is 5.8 out of 10.