Back to Database
Status published
Critical
CVE-2025-8284
Packet Power EMX and EG Missing Authentication for Critical Function
Vulnerability Description
By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms. This vulnerability could allow unauthorized users to access and manipulate monitoring and control functions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8284
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Anthony Rose and Jacob Krasnov of BC Security reported this vulnerability to CISA.
Affected Vendor
Packet Power
View all reports →Affected Software
EMX, EG
Vulnerable Versions:
0
Timeline
Official Publish:
August 8th, 2025
Last Modified:
August 8th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H