CVE-2025-27927
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.
Assigner : ics-cert@hq.dhs.gov
More information : https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04