CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-40818
Severity
LOW
CVSS
3.3
EPSS
0.09%
Original NVD Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.
Related CVEs
Other vulnerabilities affecting the same vendor(s)