CVE-2025-27927
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639
Summary
CVE-2025-27927 is a vulnerability affecting unprotected APIs that enables unauthenticated attackers to access a list of smart devices. By knowing a valid username, an attacker can exploit this vulnerability and gain unauthorized access to the information. This issue poses a significant risk to privacy and security as it allows attackers to potentially identify and target specific smart devices for further exploitation. Users are encouraged to secure their APIs with authentication mechanisms to prevent unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cloud Applications