PT-2025-37925 · Dolusoft · Dolusoft Omaspot

Sevban Donmez · Published 2025-09-16 · Updated 2025-09-16 · CVE-2025-7743

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dolusoft Omaspot versions prior to 12.09.2025

Description A cleartext transmission of sensitive information issue exists in Dolusoft Omaspot, potentially allowing interception and privilege escalation.

Recommendations Update Dolusoft Omaspot to version 12.09.2025 or later.

Fix

LPE

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-7743

Affected Products

Dolusoft Omaspot

References · 7

• https://osv.dev/vulnerability/CVE-2025-7743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7743 · Security Note
• https://twitter.com/CveFindCom/status/1967923701145370831 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0254 · Note
• https://usom.gov.tr/bildirim/tr-25-0254 · Note
• https://t.me/CVEtracker/32626 · Telegram Post
• https://twitter.com/CVEnew/status/1967965143419195467 · Twitter Post