CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. See the original NVD description below for full technical details.
CVE
CVE-2025-47872
Severity
MEDIUM
CVSS
5.8
EPSS
0.30%
Original NVD Description
The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not exist in the database. Combined with the fact that serial numbers are sequentially assigned, this allows an attacker to gain information on the product registration status of different S/Ns.