iMonitor EAM vulnerabilities

2 known vulnerabilities in iMonitor EAM from iMonitor Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  iMonitor EAM: Use of Default Credentials

  CVE-2025-10542Sep 25, 2025iMonitor Software

  iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full

• 7.8 High severity

  iMonitor EAM: Incorrect Permission Assignment for Critical Resource

  CVE-2025-10541Sep 25, 2025iMonitor Software

  iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any l