Vulnerability in Digitro Ngc Explorer
CVE-2025-4528
A weakness has been identified in Dígitro NGC Explorer up to 3.48.21. This affects an unknown function. Executing a manipulation can lead to session expiration. The attack can be launched remotely. Upgrading to version 3.48.22 mitigates this issue. It is recommended to upgrade the affected component. The action taken by the vendor is: "Strengthening of session control, expiration and invalidation mechanisms." The vulnerabilities are limited to NGC Explorer and do not affect other Dígitro products, including UNA and Guardião.
EPSS: 0.004 (32.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Digitro Ngc_explorer
- Dígitro Ngc Explorer — versions 3.48.18, 3.48.1, 3.44.9
Weakness classification (CWE)
References
- VDB-308273 | Dígitro NGC Explorer session expiration (vdb-entry)
- VDB-308273 | CTI Indicators (IOB, IOC) (signature, permissions-required)
- Submit #565309 | Dígitro NGC Explorer 3.44.15 Improper session token expiration (third-party-advisory)
- cna@vuldb.com (patch)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (technical-description, vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (related, broken-link)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (related)
Frequently asked questions
- What is CVE-2025-4528?
- CVE-2025-4528 is a medium-severity vulnerability in Digitro Ngc Explorer, classified under Insufficient Session Expiration. CVSS score: 4.3/10. Published 2025-05-11.
- How severe is CVE-2025-4528?
- Medium severity. CVSS v3 base score is 4.3 out of 10.