CVE-2025-53507

State
Published
Severity
7.1 High
Published
Aug 29, 2025
Updated
Aug 29, 2025
Reserved
Jul 2, 2025

Read the record on cve.org

Description

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Njpcert
3.06.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Njpcert

Weaknesses

  • CWE-922 Insecure storage of sensitive information

Affected Products

ProductVersions
HL330-DLS (for module MC7700)iND Co.,Ltd
  • firmware version 1.03 and earlierAffected
HL330-DLS (for module MC7330)iND Co.,Ltd
  • firmware version 2.02t and earlierAffected
HL320-DLS (for module MC7700)iND Co.,Ltd
  • firmware version 1.03 and earlierAffected
HL320-DLS (for module MC7330)iND Co.,Ltd
  • firmware version 2.02t and earlierAffected
LM-100iND Co.,Ltd
  • firmware version 1.02 and earlierAffected
LM-200 (for module AMP570)iND Co.,Ltd
  • firmware version 1.02 and earlierAffected
LM-200 (for module EC25-J)iND Co.,Ltd
  • firmware version 1.05e and earlierAffected
L2X AssistiND Co.,Ltd
  • firmware version 2.01 and earlierAffected
L2X Assist-RS-AiND Co.,Ltd
  • firmware version 1.11 and earlierAffected
L2X Assist-RS-EiND Co.,Ltd
  • firmware version 1.12 and earlierAffected
F2L Assist-SS-AiND Co.,Ltd
  • firmware version 1.03 and earlierAffected
F2L Assist-SS-EiND Co.,Ltd
  • firmware version 1.01 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.