CVE-2025-53507 (GCVE-0-2025-53507)
Vulnerability from cvelistv5
Published
2025-08-29 04:13
Modified
2025-08-29 12:05
Severity ?
6.5 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
7.1 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CWE
  • CWE-922 - Insecure storage of sensitive information
Summary
Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].
References
vultures@jpcert.or.jphttps://jvn.jp/en/jp/JVN50585992/
vultures@jpcert.or.jphttps://www.i-netd.co.jp/vulnerability/dceid-2025-001/
Impacted products
Vendor Product Version
iND Co.,Ltd HL330-DLS (for module MC7700) Version: firmware version 1.03 and earlier
 Create a notification for this product.
   iND Co.,Ltd HL330-DLS (for module MC7330) Version: firmware version 2.02t and earlier
 Create a notification for this product.
   iND Co.,Ltd HL320-DLS (for module MC7700) Version: firmware version 1.03 and earlier
 Create a notification for this product.
   iND Co.,Ltd HL320-DLS (for module MC7330) Version: firmware version 2.02t and earlier
 Create a notification for this product.
   iND Co.,Ltd LM-100 Version: firmware version 1.02 and earlier
 Create a notification for this product.
   iND Co.,Ltd LM-200 (for module AMP570) Version: firmware version 1.02 and earlier
 Create a notification for this product.
   iND Co.,Ltd LM-200 (for module EC25-J) Version: firmware version 1.05e and earlier
 Create a notification for this product.
   iND Co.,Ltd L2X Assist Version: firmware version 2.01 and earlier
 Create a notification for this product.
   iND Co.,Ltd L2X Assist-RS-A Version: firmware version 1.11 and earlier
 Create a notification for this product.
   iND Co.,Ltd L2X Assist-RS-E Version: firmware version 1.12 and earlier
 Create a notification for this product.
   iND Co.,Ltd F2L Assist-SS-A Version: firmware version 1.03 and earlier
 Create a notification for this product.
   iND Co.,Ltd F2L Assist-SS-E Version: firmware version 1.01 and earlier
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-53507",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-29T12:05:21.370891Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-29T12:05:32.544Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HL330-DLS (for module MC7700)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.03 and earlier"
            }
          ]
        },
        {
          "product": "HL330-DLS (for module MC7330)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 2.02t and earlier"
            }
          ]
        },
        {
          "product": "HL320-DLS (for module MC7700)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.03 and earlier"
            }
          ]
        },
        {
          "product": "HL320-DLS (for module MC7330)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 2.02t and earlier"
            }
          ]
        },
        {
          "product": "LM-100",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.02 and earlier"
            }
          ]
        },
        {
          "product": "LM-200 (for module AMP570)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.02 and earlier"
            }
          ]
        },
        {
          "product": "LM-200 (for module EC25-J)",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.05e and earlier"
            }
          ]
        },
        {
          "product": "L2X Assist",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 2.01 and earlier"
            }
          ]
        },
        {
          "product": "L2X Assist-RS-A",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.11 and earlier"
            }
          ]
        },
        {
          "product": "L2X Assist-RS-E",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.12 and earlier"
            }
          ]
        },
        {
          "product": "F2L Assist-SS-A",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.03 and earlier"
            }
          ]
        },
        {
          "product": "F2L Assist-SS-E",
          "vendor": "iND Co.,Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version 1.01 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status]."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-922",
              "description": "Insecure storage of sensitive information",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-29T04:13:58.310Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.i-netd.co.jp/vulnerability/dceid-2025-001/"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN50585992/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2025-53507",
    "datePublished": "2025-08-29T04:13:58.310Z",
    "dateReserved": "2025-07-02T00:52:40.811Z",
    "dateUpdated": "2025-08-29T12:05:32.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-53507\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2025-08-29T05:15:31.060\",\"lastModified\":\"2025-08-29T16:24:29.730\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV30\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-922\"}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN50585992/\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://www.i-netd.co.jp/vulnerability/dceid-2025-001/\",\"source\":\"vultures@jpcert.or.jp\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-53507\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-29T12:05:21.370891Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-29T12:05:26.526Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"iND Co.,Ltd\", \"product\": \"HL330-DLS (for module MC7700)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.03 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"HL330-DLS (for module MC7330)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 2.02t and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"HL320-DLS (for module MC7700)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.03 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"HL320-DLS (for module MC7330)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 2.02t and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"LM-100\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.02 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"LM-200 (for module AMP570)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.02 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"LM-200 (for module EC25-J)\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.05e and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"L2X Assist\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 2.01 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"L2X Assist-RS-A\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.11 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"L2X Assist-RS-E\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.12 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"F2L Assist-SS-A\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.03 and earlier\"}]}, {\"vendor\": \"iND Co.,Ltd\", \"product\": \"F2L Assist-SS-E\", \"versions\": [{\"status\": \"affected\", \"version\": \"firmware version 1.01 and earlier\"}]}], \"references\": [{\"url\": \"https://www.i-netd.co.jp/vulnerability/dceid-2025-001/\"}, {\"url\": \"https://jvn.jp/en/jp/JVN50585992/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-922\", \"description\": \"Insecure storage of sensitive information\"}]}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2025-08-29T04:13:58.310Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-53507\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-08-29T12:05:32.544Z\", \"dateReserved\": \"2025-07-02T00:52:40.811Z\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"datePublished\": \"2025-08-29T04:13:58.310Z\", \"assignerShortName\": \"jpcert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.