CVE-2025-7426— MINOVA TTA Information Disclosure and Credential Exposure
Quick assessment
Affected
MINOVA Information Services GmbH TTA
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MINOVA TTA是德国MINOVA公司的一款自动化油品装卸系统。 MINOVA TTA存在安全漏洞，该漏洞源于调试端口1604暴露FTP凭据，可能导致未经验证的远程访问和数据泄露。
Possible ATT&CK Techniques 3 AI
T1005 · Data from Local System T1530 · Data from Cloud Storage T1213 · Data from Information Repositories
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-7426
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MINOVA TTA Information Disclosure and Credential Exposure
Source: CVE Program / CVE List V5
Vulnerability Description
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of automated business processes (e.g. EDI or data integration), this could lead to data manipulation, extraction, or abuse. Debug ports 1602, 1603 and 1636 also expose service architecture information and system activity logs
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
MINOVA TTA 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MINOVA TTA是德国MINOVA公司的一款自动化油品装卸系统。 MINOVA TTA存在安全漏洞，该漏洞源于调试端口1604暴露FTP凭据，可能导致未经验证的远程访问和数据泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MINOVA Information Services GmbH | TTA | 11.17.0 | - |
|
II. Public POCs for CVE-2025-7426
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-7426
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-7426 (1)
-
🔗 Security Advisory - CVE-2025-7426 - CRYPTRON Security GmbH Read full article technical-description third-party-advisory
IV. Related Vulnerabilities
Same weakness: CWE-200
-
CVE-2026-84348
Chrome MediaCapture 152.0.7977.75 前信息泄露 -
CVE-2026-84359
Chrome 152 之前 Skia 远程信息泄露漏洞 -
CVE-2026-84481
WWBN AVideo through 30.0 Information Disclosure via MobileMa -
CVE-2026-84195
Kyverno before 1.16.4 Credential Leak via apiCall -
CVE-2026-53507
oasdiff actions resolve external $refs by default, enabling
V. Comments for CVE-2025-7426
Anonymous User
2025-08-25 09:40:19katana