← Vulnerability feed

Vulnerability record · CVE-2025-67159 · published 2 January 2026

CVE-2025-67159: Vatilon pa4 firmware cleartext transmission vulnerability

Vatilon · Pa4 Firmware

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.

7.5 CVSS 3.1 High EPSS 0.29% · top 80.2% CWE-319 · Cleartext transmission
7.5CVSS 3.1 base score
0.29%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References, 1 tagged exploit
5 Jul 2026Last modified by NVD

Description

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Remenis/CVE-2025-67159 ExploitThird Party Advisory

Track CVE-2025-67159 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-67160Vatilon pa4 firmware path traversal vulnerabilityAn issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.EPSS 0.94%

Source: NIST National Vulnerability Database (record CVE-2025-67159), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.