CVE-2025-4528 Dígitro NGC Explorer session expiration
Remote attackers can bypass session expiration controls in Dígitro NGC Explorer, potentially maintaining unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-4528?
CVE-2025-4528 is a medium-severity vulnerability in Dígitro NGC Explorer, published on 11 May 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A weakness has been identified in Dígitro NGC Explorer up to 3.48.21. This affects an unknown function. Executing a manipulation can lead to session expiration. The attack can be launched remotely. Upgrading to version 3.48.22 mitigates this issue. It is recommended to upgrade the affected component. The action taken by the vendor is: "Strengthening of session control, expiration and invalidation mechanisms." The vulnerabilities are limited to NGC Explorer and do not affect other Dígitro products, including UNA and Guardião.
Weakness: CWE-613
Which versions are affected by CVE-2025-4528?
It affects 1 product.
Products include Digitro Ngc Explorer.
How do I fix CVE-2025-4528?
No fix has been published for CVE-2025-4528 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-4528 being exploited?
There is no known exploitation of CVE-2025-4528 in the wild and no public exploit code.
Other vulnerabilities in Dígitro NGC Explorer
Sources
Also known as GHSA-9v5v-3jhc-pffj.