CVE-2025-64642 – Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource

The following table lists the changes that have been made to the
CVE-2025-64642 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Dec. 02, 2025

    Action Type Old Value New Value
    Added Description NMIS/BioDose V22.02 and previous versions’ installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries.
    Added CVSS V4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CVSS V3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
    Added CWE CWE-732
    Added Reference https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01
Share the Post:

Related Posts