CVE-2025-1907

Instantel Micromate Missing Authentication for Critical Function

Description

Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected.

Workaround:

Instantel is actively working on a firmware update to address this vulnerability. In the meantime, Micromate users are advised to implement the following workaround measures: * Establish and maintain a list of approved IP addresses that are allowed to access the modem. This measure will help prevent unauthorized access. For more information, please contact Instantel technical support. https://www.instantel.com/service-and-support/contact-technical-support

Link	Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-04
https://www.instantel.com/service-and-support/contact-technical-support

What is the severity of CVE-2025-1907?: CVE-2025-1907 has been scored as a critical severity vulnerability.
How to fix CVE-2025-1907?: As a workaround for remediating CVE-2025-1907: Instantel is actively working on a firmware update to address this vulnerability. In the meantime, Micromate users are advised to implement the following workaround measures: * Establish and maintain a list of approved IP addresses that are allowed to access the modem. This measure will help prevent unauthorized access. For more information, please contact Instantel technical support. https://www.instantel.com/service-and-support/contact-technical-support
Is CVE-2025-1907 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-1907 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-1907?: CVE-2025-1907 affects Instantel Micromate.