CVE-2025-43004: Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)
Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view non-sensitive customer information. However, this does not affect data integrity or availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43004?
CVE-2025-43004 is classified as a high-severity vulnerability due to the potential exposure of customer data to unauthorized users.
How do I fix CVE-2025-43004?
To fix CVE-2025-43004, ensure proper authentication mechanisms are implemented for the Production Operator Dashboards.
Who is affected by CVE-2025-43004?
CVE-2025-43004 affects users of SAP Digital Manufacturing who utilize Production Operator Dashboards.
What can attackers do with CVE-2025-43004?
Attackers can exploit CVE-2025-43004 to gain unauthorized access to customer data through unprotected dashboards.
How can I check if my system is vulnerable to CVE-2025-43004?
To check for vulnerability to CVE-2025-43004, review your implementation of Production Operator Dashboards for missing authentication controls.