Ad

CVE-2025-15515

MEDIUM CVSS 4.0: 6.9 EPSS 0.03%
Updated Mar 16, 2026
Parameter Value
CVSS 6.9 (MEDIUM)
Type CWE-306 (Missing Authentication for Critical Function)
Public PoC No

The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v4.0