Microsoft security update for CVE-2025-30398
🔗 CVE IDs covered (1)
📋 Microsoft's advisory
EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398. This page also shows what EchelonGraph holds for CVE-2025-30398, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.
🎯 Affected products20
- Nuance PowerScribe 360 version 4.0.1
- Nuance PowerScribe 360 version 4.0.2
- Nuance PowerScribe 360 version 4.0.3
- Nuance PowerScribe 360 version 4.0.4
- Nuance PowerScribe 360 version 4.0.5
- Nuance PowerScribe 360 version 4.0.6
- Nuance PowerScribe 360 version 4.0.7
- Nuance PowerScribe 360 version 4.0.8
- Nuance PowerScribe 360 version 4.0.9
- Nuance PowerScribe One version 2019.1
- Nuance PowerScribe One version 2019.10
- Nuance PowerScribe One version 2019.2
- Nuance PowerScribe One version 2019.3
- Nuance PowerScribe One version 2019.4
- Nuance PowerScribe One version 2019.5
- Nuance PowerScribe One version 2019.6
- Nuance PowerScribe One version 2019.7
- Nuance PowerScribe One version 2019.8
- Nuance PowerScribe One version 2019.9
- PowerScribe One version 2023.1 SP2 Patch 7
✅ Updates Microsoft lists: 20 updates
20 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.
| KB article | Update | Fixed build |
|---|---|---|
| — | Security Update | 7.0.243.17 |
| — | Security Update | 7.0.427.13 |
| — | Security Update | 7.0.528.18 |
| — | Security Update | 7.0.277.26 |
| — | Security Update | 7.0.316.9 |
| — | Security Update | 2019.3.16.20 |
| — | Security Update | 2019.2.9.8 |
| — | Security Update | 2019.1.96.5 |
| — | Security Update | 7.0.111.66 |
| — | Security Update | 7.0.154.16 |
| — | Security Update | 7.0.197.8 |
| — | Security Update | 7.0.212.9 |
| — | Security Update | 2019.5.14.39 |
| — | Security Update | 2019.4.9.16 |
| — | Security Update | 2019.6.36.39 |
| — | Security Update | 2019.8.43.15 |
| — | Security Update | 2019.7.107.21 |
| — | Security Update | 2019.9.31.19 |
| — | Security Update | 2019.10.36.4 |
| — | Security Update | 2023.2.3027.0 |
🧭 EchelonGraph on CVE-2025-30398
- EchelonGraph score
- 8.1 HIGH
- CISA KEV
- Not listed
- Fix status
- A fix is available — apply it.
Description from the CVE record (CVE.org), as published by its numbering authority
Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.
Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2025-30398, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).
🔗 References (4)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398
- referencehttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-360-Reporting-Release-Notes-for-Version-4-x
- referencehttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-2019-Release-Notes
- referencehttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-Release-Notes