CVE-2025-1709

CVE-2025-1709 describes a vulnerability in Endress Meac300 FNADE4 products where local PostgreSQL database credentials are stored in plain text, sometimes partially base64 encoded. This medium-severity flaw (CVSS 6.5) allows an authenticated attacker to remotely access sensitive information with low attack complexity, potentially leading to full compromise of the database. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat but still requiring attention due to the high confidentiality impact.