CVE-2025-53703 Details
Description
DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers.
A vulnerability exists in the DuraComm SPM-500 DP-10iN-100-MU power distribution panel, all versions through 4.10. The issue involves the unencrypted transmission of sensitive data over a potentially interceptable channel, leaving it vulnerable to interception by attackers.
Users are advised to update to Version 4.10A. Contact DuraComm to obtain the update.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 22, 2025CISA-ADP
Assessed Jul 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://duracomm.com/contact-us/ | [email protected] | Vendor |
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-01 | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-319 | Cleartext Transmission of Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| DuraComm SPM-500 DP-10iN-100-MU | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 22, 2025 | New CVE Received | [email protected] |