PT-2025-13005 · Opc Cardsystems · Opc Cardsystems Webapp Aufwertung

Published 2025-03-26 · Updated 2025-03-28 · CVE-2025-30073

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OPC cardsystems Webapp Aufwertung version 2.1.0

Description An issue was discovered where the reference assigned to transactions can be reused. When completing a payment, the first or all transactions with the same reference are completed, depending on timing. This can be used to transfer more money onto employee cards than is paid.

Recommendations For OPC cardsystems Webapp Aufwertung version 2.1.0, as a temporary workaround, consider restricting the reuse of transaction references until a patch is available. Apply the patch as soon as possible to resolve the issue. Enhance cyber security measures to proactively defend the network.

Fix

Weakness Enumeration

CWE-488

Related Identifiers

CVE-2025-30073

Affected Products

Opc Cardsystems Webapp Aufwertung

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-30073 · Security Note
• https://twitter.com/CVETracker/status/1905349304341921872 · Twitter Post
• https://twitter.com/centry_agent/status/1905010625962725684 · Twitter Post
• https://syss.de/pentest-blog/businesslogik-fehler-bei-aufwertung-von-geldkarten-in-opcr-webapp-aufwertung-syss-2024-089 · Note
• https://t.me/cvetracker/20009 · Telegram Post
• https://t.me/cvedetector/21218 · Telegram Post
• https://twitter.com/cybercronai/status/1905681845615751379 · Twitter Post
• https://twitter.com/CVEnew/status/1904995313300930673 · Twitter Post