CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-41012
Severity
MEDIUM
CVSS
5.3
EPSS
0.24%
Original NVD Description
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
Related CVEs
Other vulnerabilities affecting the same vendor(s)