{"id":"CVE-2025-10542","state":"PUBLISHED","title":"Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM","description":"iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients.","publishedAt":"2025-09-25T14:35:18.879Z","updatedAt":"2025-11-03T18:08:41.325Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"SEC-VLab","products":["iMonitor Software Inc. iMonitor EAM"],"affected":[{"vendor":"iMonitor Software Inc.","product":"iMonitor EAM","defaultStatus":"unknown","versions":[{"version":"9.63.94","status":"affected"}]}],"references":["https://r.sec-consult.com/imonitor","https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/","http://seclists.org/fulldisclosure/2025/Sep/72"],"weaknesses":["CWE-1392"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/10xxx/CVE-2025-10542.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-10542","state":"PUBLISHED","datePublished":"2025-09-25T14:35:18.879Z","dateUpdated":"2025-11-03T18:08:41.325Z","assignerShortName":"SEC-VLab","assignerOrgId":"551230f0-3615-47bd-b7cc-93e92e730bbf","dateReserved":"2025-09-16T07:44:52.501Z"},"containers":{"cna":{"title":"Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM","descriptions":[{"lang":"en","value":"iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients."}],"affected":[{"vendor":"iMonitor Software Inc.","product":"iMonitor EAM","defaultStatus":"unknown","versions":[{"version":"9.63.94","status":"affected"}]}],"references":[{"url":"https://r.sec-consult.com/imonitor","tags":["third-party-advisory"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1392","description":"CWE-1392 Use of Default Credentials","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SEC-VLab","orgId":"551230f0-3615-47bd-b7cc-93e92e730bbf","dateUpdated":"2025-09-25T14:35:18.879Z"},"credits":[{"lang":"en","type":"finder","value":"Marius Renner, SEC Consult Vulnerability Lab"},{"lang":"en","type":"finder","value":"Daniel Hirschberger, SEC Consult Vulnerability Lab"},{"lang":"en","type":"finder","value":"Tobias Niemann, SEC Consult Vulnerability Lab"},{"lang":"en","type":"finder","value":"Thorger Jansen, SEC Consult Vulnerability Lab"}],"impacts":[{"capecId":"CAPEC-70","descriptions":[{"lang":"en","value":"CAPEC-70 Try Common or Default Usernames and Passwords"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>The vendor was unresponsive and did not answer to our communication attempts. Therefore, a patch is not available for these security issues. End users of this product should contact the vendor and demand a patch.</p>"}],"value":"The vendor was unresponsive and did not answer to our communication attempts. Therefore, a patch is not available for these security issues. End users of this product should contact the vendor and demand a patch."}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-09-25T18:23:26.738495Z","id":"CVE-2025-10542","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-25T18:24:22.849Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2025/Sep/72"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T18:08:41.325Z"}}]}}}