{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-18T00:35:46.495","vulnerabilities":[{"cve":{"id":"CVE-2025-24340","sourceIdentifier":"psirt@bosch.com","published":"2025-04-30T11:15:49.797","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext passwords of other users."},{"lang":"es","value":"Una vulnerabilidad en el archivo de configuración de usuarios del sistema operativo ctrlX puede permitir que un atacante remoto autenticado (con pocos privilegios) recupere las contraseñas de texto simple de otros usuarios."}],"metrics":{"cvssMetricV31":[{"source":"psirt@bosch.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@bosch.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"references":[{"url":"https://psirt.bosch.com/security-advisories/BOSCH-SA-640452.html","source":"psirt@bosch.com"}]}}]}