CyberSecBulletin

iMonitor Software vulnerabilities

We track 2 vulnerabilities in iMonitor Software products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2025.

2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score

Latest iMonitor Software vulnerabilities

  • 9.8 Critical severity

    iMonitor EAM: Use of Default Credentials

    CVE-2025-10542iMonitor Software

    iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full

  • 7.8 High severity

    iMonitor EAM: Incorrect Permission Assignment for Critical Resource

    CVE-2025-10541iMonitor Software

    iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any l