PT-2025-13512 · Meetme · Meetme

Published 2025-03-28 · Updated 2025-03-28 · CVE-2025-2908

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MeetMe products versions prior to 2024-09

Description The issue concerns the exposure of credentials in the call forwarding configuration module, allowing an attacker to gain access to important assets via configuration files.

Recommendations For versions prior to 2024-09, update to a version 2024-09 or later to resolve the issue. As a temporary workaround, consider restricting access to the call forwarding configuration module to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-522

CWE-312

Related Identifiers

CVE-2025-2908

Affected Products

Meetme

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-2908 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fermax-mobile-applications · Note
• https://t.me/cvetracker/20180 · Telegram Post
• https://t.me/cvedetector/21412 · Telegram Post
• https://twitter.com/CVEnew/status/1905674350365442381 · Twitter Post