Review reviewHigh

CVE-2025-30398

Microsoft Nuance PowerScribe 360 version 4.0.1, Nuance PowerScribe 360 version 4.0.2, Nuance PowerScribe 360 version 4.0.3

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.76%

Technical severityCVSS 8.1

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Product: Microsoft Nuance PowerScribe 360 version 4.0.1, Nuance PowerScribe 360 version 4.0.2, Nuance PowerScribe 360 version 4.0.3
Affected versions: 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 2019.1, 2019.10, 2019.2, 2019.3, 2019.4, 2019.5, 2019.6, 2019.7, 2019.8, 2019.9, 2023.1
Fixed versions: No verified fixed-version field is available yet

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that Microsoft Nuance PowerScribe 360 version 4.0.1, Nuance PowerScribe 360 version 4.0.2, Nuance PowerScribe 360 version 4.0.3 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.