CVE-2025-4528 - Dígitro NGC Explorer session expiration

Back Back to CVE browser

MEDIUM

Dígitro NGC Explorer session expiration

Published May 11, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.40%

Description

A weakness has been identified in Dígitro NGC Explorer up to 3.48.21. This affects an unknown function. Executing a manipulation can lead to session expiration. The attack can be launched remotely. Upgrading to version 3.48.22 mitigates this issue. It is recommended to upgrade the affected component. The action taken by the vendor is: "Strengthening of session control, expiration and invalidation mechanisms." The vulnerabilities are limited to NGC Explorer and do not affect other Dígitro products, including UNA and Guardião.

Affected products

Vendor Dígitro Product NGC Explorer Default
n/a
- Version
  3.48.0
  Status
  affected
  Constraints
  -
- Version
  3.48.1
  Status
  affected
  Constraints
  -
- Version
  3.48.10
  Status
  affected
  Constraints
  -
- Version
  3.48.11
  Status
  affected
  Constraints
  -
- Version
  3.48.12
  Status
  affected
  Constraints
  -
- Version
  3.48.13
  Status
  affected
  Constraints
  -
- Version
  3.48.14
  Status
  affected
  Constraints
  -
- Version
  3.48.15
  Status
  affected
  Constraints
  -
- Version
  3.48.16
  Status
  affected
  Constraints
  -
- Version
  3.48.17
  Status
  affected
  Constraints
  -
- Version
  3.48.18
  Status
  affected
  Constraints
  -
- Version
  3.48.19
  Status
  affected
  Constraints
  -
- Version
  3.48.2
  Status
  affected
  Constraints
  -
- Version
  3.48.20
  Status
  affected
  Constraints
  -
- Version
  3.48.21
  Status
  affected
  Constraints
  -
- Version
  3.48.3
  Status
  affected
  Constraints
  -
- Version
  3.48.4
  Status
  affected
  Constraints
  -
- Version
  3.48.5
  Status
  affected
  Constraints
  -
- Version
  3.48.6
  Status
  affected
  Constraints
  -
- Version
  3.48.7
  Status
  affected
  Constraints
  -
- Version
  3.48.8
  Status
  affected
  Constraints
  -
- Version
  3.48.9
  Status
  affected
  Constraints
  -
- Version
  3.48.22
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dígitro

NGC Explorer

n/a

Version	Status	Constraints
3.48.0	affected	-
3.48.1	affected	-
3.48.10	affected	-
3.48.11	affected	-
3.48.12	affected	-
3.48.13	affected	-
3.48.14	affected	-
3.48.15	affected	-
3.48.16	affected	-
3.48.17	affected	-
3.48.18	affected	-
3.48.19	affected	-
3.48.2	affected	-
3.48.20	affected	-
3.48.21	affected	-
3.48.3	affected	-
3.48.4	affected	-
3.48.5	affected	-
3.48.6	affected	-
3.48.7	affected	-
3.48.8	affected	-
3.48.9	affected	-
3.48.22	unaffected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (8)

https://digitro.com/esclarecimentos-recomendacoes-ctir-gov/
related
https://digitro.com/recomendacao-10-2026-ctir-gov/
patch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14249
Advisory
https://vuldb.com/cve/CVE-2025-4528
third-party-advisory
https://vuldb.com/submit/565309
third-party-advisory
https://vuldb.com/vuln/308273
vdb-entrytechnical-description
https://vuldb.com/vuln/308273/cti
signaturepermissions-required
https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026
broken-link

Link	Providers	Tags
https://digitro.com/esclarecimentos-recomendacoes-ctir-gov/		related
https://digitro.com/recomendacao-10-2026-ctir-gov/		patch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14249		Advisory
https://vuldb.com/cve/CVE-2025-4528		third-party-advisory
https://vuldb.com/submit/565309		third-party-advisory
https://vuldb.com/vuln/308273		vdb-entrytechnical-description
https://vuldb.com/vuln/308273/cti		signaturepermissions-required
https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026		broken-link