PT-2025-37949 · Beefull Energy Technologies · Beefull App

Samet Alkis · CVE-2025-7355 · Published 2025-09-16 · Updated 2025-09-16

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beefull App versions prior to 24.07.2025

Description An authorization bypass exists in Beefull Energy Technologies Beefull App due to exploitation of trusted identifiers through a user-controlled key.

Recommendations Update Beefull App to version 24.07.2025 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-7355

Affected Products

Beefull App

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-7355 · Security Note
• https://twitter.com/CVEnew/status/1967965118555361696 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0255 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0255 · Note
• https://twitter.com/VulmonFeeds/status/1968004127587250612 · Twitter Post