CVE-2025-60969

MediumCVSS 5.7

Published: 06/10/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

41th percentile - higher than 41% of all known CVEs

Summary

A Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) with firmware F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.

Risk Assessment

An attacker can read sensitive configuration files or credentials, leading to confidentiality breach and potential device takeover.

Recommendation

Immediately update the firmware to the latest version and restrict management interface access to trusted networks only.

Original NVD description (English source)

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.