CVE-2025-53507

High

Description

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].

SeverityHigh
CVSS7.1
Exploit probability—
ProductHL330-DLS (for module MC7700)
PublishedAug 29, 2025
First seenAug 29, 2025
Weakness typeCWE-922CWE-922

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
iND Co.,Ltd HL330-DLS (for module MC7700)firmware version 1.03 and earlier—
iND Co.,Ltd HL330-DLS (for module MC7330)firmware version 2.02t and earlier—
iND Co.,Ltd HL320-DLS (for module MC7700)firmware version 1.03 and earlier—
iND Co.,Ltd HL320-DLS (for module MC7330)firmware version 2.02t and earlier—
iND Co.,Ltd LM-100firmware version 1.02 and earlier—
iND Co.,Ltd LM-200 (for module AMP570)firmware version 1.02 and earlier—
iND Co.,Ltd LM-200 (for module EC25-J)firmware version 1.05e and earlier—
iND Co.,Ltd L2X Assistfirmware version 2.01 and earlier—
iND Co.,Ltd L2X Assist-RS-Afirmware version 1.11 and earlier—
iND Co.,Ltd L2X Assist-RS-Efirmware version 1.12 and earlier—
iND Co.,Ltd F2L Assist-SS-Afirmware version 1.03 and earlier—
iND Co.,Ltd F2L Assist-SS-Efirmware version 1.01 and earlier—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-53507 · HL330-DLS (for module MC7700) · Dark Radar