Mirion Medical Ec2 Software Nmis Biodose
5 CVEs affecting Mirion Medical Ec2 Software Nmis Biodose. Latest disclosed: 2025-12-02. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-64298 | High | 8.4 | 2025-12-02 | NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clie… |
CVE-2025-62575 | High | 8.3 | 2025-12-02 | NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and other created accounts by default have t… |
CVE-2025-61940 | High | 8.3 | 2025-12-02 | NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is res… |
CVE-2025-64642 | High | 8.0 | 2025-12-02 | NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can en… |
CVE-2025-64778 | High | 7.3 | 2025-12-02 | NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow una… |