PT-2025-18058 · Unknown · Com-Server

Published 2025-04-28 · Updated 2025-12-05 · CVE-2025-3200

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Com-Server (affected versions not specified)

Description An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2025-05908

CVE-2025-3200

Affected Products

Com-Server

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2025-3200 · Security Note
• https://bdu.fstec.ru/vul/2025-05908 · Security Note
• https://twitter.com/cracbot/status/1918621617707520432 · Twitter Post
• https://twitter.com/samilaiho/status/1917099823217430613 · Twitter Post
• https://twitter.com/gothburz/status/1916904127784796555 · Twitter Post
• https://t.me/cvenotify/120014 · Telegram Post
• https://twitter.com/cybercronai/status/1916886486428930124 · Twitter Post
• https://twitter.com/cybercronai/status/1916895322288066842 · Twitter Post
• https://certvde.com/en/advisories/VDE-2025-031 · Note
• https://t.me/pentestingnews/60351 · Telegram Post
• https://twitter.com/adriananglin/status/1917184565682045073 · Twitter Post
• https://t.me/cvetracker/22516 · Telegram Post
• https://twitter.com/syedaquib77/status/1917065623399756127 · Twitter Post
• https://twitter.com/dufyijirkosa/status/1919671001140416768 · Twitter Post
• https://t.me/cvedetector/23895 · Telegram Post