CVE-2025-30183

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-30183
CWE	https://cwe.mitre.org/data/definitions/522.html

CyberData 011209 Intercom does not properly store or protect web server admin credentials.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Potential Mitigations

https://cwe.mitre.org/data/definitions/102.html
https://cwe.mitre.org/data/definitions/474.html
https://cwe.mitre.org/data/definitions/50.html
https://cwe.mitre.org/data/definitions/509.html
https://cwe.mitre.org/data/definitions/551.html
https://cwe.mitre.org/data/definitions/555.html
https://cwe.mitre.org/data/definitions/560.html
https://cwe.mitre.org/data/definitions/561.html
https://cwe.mitre.org/data/definitions/600.html
https://cwe.mitre.org/data/definitions/644.html
https://cwe.mitre.org/data/definitions/645.html
https://cwe.mitre.org/data/definitions/652.html
https://cwe.mitre.org/data/definitions/653.html

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01

Insufficiently Protected Credentials

Weakness

Potential Mitigations

Related Attack Patterns

References