Back to Database
Status published
Medium
CVE-2025-25061
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI...
Vulnerability Description
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-25061
Credits & Attribution
No credits recorded in the NVD database.
References
More from JTEKT ELECTRONICS CORPORATION
View All →CVE-2025-26401
Weak encoding for password vulnerability exists in HMI ViewJet C-more...
Medium
6.5
CVE-2025-24317
Allocation of resources without limits or throttling issue exists in...
Medium
5.3
CVE-2025-24310
Improper restriction of rendered UI layers or frames issue exists...
Medium
4.3
CVE-2024-47136
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former...
High
7.8
CVE-2024-47135
Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software...
High
7.8
Affected Vendor
JTEKT ELECTRONICS CORPORATION
View all reports →Affected Software
HMI ViewJet C-more series, HMI GC-A2 series
Vulnerable Versions:
All versions
Timeline
Official Publish:
April 4th, 2025
Last Modified:
April 4th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.