- Description
- An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Awaiting Analysis
- CNA Tags
- unsupported-when-assigned
CVSS 4.0
- Type
- Secondary
- Base score
- 9.3
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- CRITICAL
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- Hype score
- Not currently trending
🚨 CRITICAL: CVE-2025-13926 (CVSS 9.8) - Contemporary Controls BASC 20T vulnerable to packet forgery via network sniffing. Attackers can make arbitrary requests with no authentication required. #CVE #PatchNow #ThreatIntel https://t.co/qV2MqMFP1x
@giuseppe_1337
10 Apr 2026
196 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔴 Adobe Reader zero-day exploited since Dec — no patch 🔴 Marimo RCE weaponised in under 10hrs 🔴 CISA ICS: CVE-2025-13926 (CVSS 9.8) 🟠 Smart Slider supply chain hits 900K+ sites 🟠 Qilin ransomware surging Full brief: https://t.co/MkeXpxUTVF #Daily #ThreatIntel #
@ORIntelligence
9 Apr 2026
3 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-13926: CRITICAL] An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.#cve,CVE-2025-13926,#cybersecurity https://t.co/rSrPJF3OY2
@CveFindCom
9 Apr 2026
64 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-13926 An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T. https://t.co/U96BiCmqwx
@CVEnew
9 Apr 2026
115 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2025-13926: Contemporary Controls BASC 20T R... Network sniffing leads to complete system takeover on industrial controllers - packet forgery bypasses all auth with ze... https://t.co/lcvvekRuSu #netsec #vulnerability #CVE #sysadmin #zeroday
@0dayPublishing
9 Apr 2026
178 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Attackers exploiting CVE-2025-13926 can intercept network traffic to forge packets and execute arbitrary requests against Contemporary Controls BASC-20T industrial controllers. This enables device reconfiguration, file manipulation, and remote procedure calls. Runtime
@aviatrixtrc
9 Apr 2026
130 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes