CVE-2025-3920
High
Description
A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extract these credentials, potentially leading to a complete compromise of the application's administrative functions. This issue was fixed in version 2025.03.27 of the SUR-FBD CMMS software.
SeverityHigh
CVSS8.5
Exploit probability—
ProductSUR-FBD CMMS
PublishedJul 7, 2025
First seenJul 7, 2025
Weakness typeCWE-259CWE-259
How to fix
Update
- SUR-FBD CMMS SUR-FBD CMMS2025.03.27 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUR-FBD CMMS SUR-FBD CMMS | v < 2025.03.27 | 2025.03.27 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.