Vulnerability · Published Oct 23, 2025 · Assigned by VulnCheck
CVE-2025-34156Tibbo AggreGate Network Manager < 6.40.05 System Information Exposure
Medium 6.9
In plain English
A medium-severity security flaw in AggreGate Network Manager from Tibbo Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.4%top 68.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tibbo Systems | AggreGate Network Manager | 0 – before 6.40.05 |
Weakness: CWE-497 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N