CVE-2025-12055 Scanner
CVE-2025-12055 Scanner - Path Traversal vulnerability in MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2
Used 2.4k times · 4.2k assets checked · url
CVE
CVE-2025-12055
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
HYDRA X, MIP 2 and FEDRA 2 of MPDV Mikrolab GmbH suffer from an unauthenticated local file disclosure vulnerability in all releases until Maintenance Pack 36 with Servicepack 8 (week 36/2025), which allows an attacker to read arbitrary files from the Windows operating system. The "Filename" parameter of the public $SCHEMAS$ ressource is vulnerable and can be exploited easily.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
mip 2fedra 2hydra x
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: mip 2
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →