CVE-2025-27615

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-27615

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27615.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-27615

Aliases

GHSA-qf9w-x9qx-2mq7

Published

2025-03-10T18:47:59.819Z

Modified

2026-07-15T01:49:02.086953067Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator

Summary

umatiGateway's UI publicly accessible in provided docker-compose file

Details

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit 5d81a3412bc0051754a3095d89a06d6d743f2b16 uses 127.0.0.1:8080:8080 to limit access to the local network. For those who are unable to use this proposed patch, a firewall on Port 8080 may block remote access, but the workaround may not be perfect because Docker may also bypass a firewall by its iptable based rules for port forwarding.

Database specific

{
    "cwe_ids": [
        "CWE-200"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27615.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "5d81a3412bc0051754a3095d89a06d6d743f2b16"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/umati/umatigateway

Affected ranges

Type

GIT

Repo

https://github.com/umati/umatigateway

Events

Introduced

Fixed

5d81a3412bc0051754a3095d89a06d6d743f2b16

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27615.json"