Vulnerability · Published Sep 25, 2025 · Assigned by SEC-VLab

CVE-2025-10542Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM

Critical 9.8

In plain English

A critical-severity security flaw in iMonitor EAM from iMonitor Software Inc.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.8%top 44.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients.

Affected products (as reported)

Vendor	Product	Versions
iMonitor Software Inc.	iMonitor EAM	9.63.94

Weakness: CWE-1392 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References