PT-2025-9043 · Bosscomm · Bosscomm If740 System+1

CVE-2025-25727 · Publicado 2025-02-27 · Atualizado 2025-03-01

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000 Bosscomm IF740 System versions 6.25 through 6.00

Description The issue involves the storage of passwords in cleartext.

Recommendations For Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000, update the firmware to a version that securely stores passwords. For Bosscomm IF740 System versions 6.25 through 6.00, update the system to a version that securely stores passwords.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

CWE-256

Identificadores relacionados

CVE-2025-25727

Produtos afetados

Bosscomm If740 Firmware

Bosscomm If740 System

Referências · 7

• https://t.me/cvedetector/19108 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-25727 · Nota de Segurança
• https://twitter.com/CVEnew/status/1895622689194143784 · Publicação no Twitter
• https://twitter.com/cybercronai/status/1895742132037501380 · Publicação no Twitter
• https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet · Nota
• https://t.me/cvenotify/112826 · Publicação no Telegram
• https://t.me/cvenotify/112734 · Publicação no Telegram