PT-2025-39852 · Payeer · Payeer Android

Mhamdanali81 · Published 2025-09-29 · Updated 2025-12-23 · CVE-2025-57197

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0

Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the PIN verification check and directly modify the authentication PIN. This allows unauthorized modification of the PIN without knowledge of the original PIN. The vulnerability requires root access to the device for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-57197

Affected Products

Payeer Android

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-57197 · Security Note
• https://twitter.com/CVEnew/status/2003567347215327523 · Twitter Post
• https://drive.google.com/drive/folders/1FHn4dFHeJ6W1IKlsB447v_hJoqqF9qgv?usp=sharing · Note
• https://medium.com/@mhamdanali81/cve-2025-57197-breaking-the-pin-in-payeers-android-app-31e3cdee02ef · Note
• https://payeer.com · Note
• http://payeer.com · Note
• https://t.me/CVEtracker/33641 · Telegram Post