CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.
CVE
CVE-2025-13053
Severity
LOW
CVSS
3.7
EPSS
0.09%
Original NVD Description
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the UPS server configuation. This issue affects ADM: from 4.1.0 through 4.3.3.RKD2, from 5.0.0 through 5.1.0.RN42.
Related CVEs
Other vulnerabilities affecting the same vendor(s)