CVE-2025-47697 - Client-side enforcement of server-side security issue exists in wivia 5 all versions

Back Back to CVE browser

MEDIUM

Client-side enforcement of server-side security issue exists in wivia 5 all versions

Published May 30, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.30%

Description

Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user.

Affected products

Vendor Uchida Yoko Co., Ltd. Product Wivia 5 Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Uchida Yoko Co., Ltd.

Wivia 5

n/a

Version	Status	Constraints
all versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-602

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16464
Advisory
https://jvn.jp/en/jp/JVN51394666/
Third Party Advisory
https://www.uchida.co.jp/wivia/support02.html
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16464		Advisory
https://jvn.jp/en/jp/JVN51394666/		Third Party Advisory
https://www.uchida.co.jp/wivia/support02.html		Vendor Advisory