PT-2025-40342 · Unknown · Poscube Assist

Published 2025-10-02 · Updated 2025-10-02 · CVE-2025-0642

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions PosCube Assist versions through 10.02.2025

Description The software contains hard-coded credentials and allows authorization bypass through user-controlled keys, potentially enabling excavation and authentication bypass.

Recommendations Update to a version later than 10.02.2025.

Fix

IDOR

Using Hardcoded Credentials

Weakness Enumeration

CWE-639

CWE-798

Related Identifiers

CVE-2025-0642

Affected Products

Poscube Assist

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-0642 · Security Note
• https://t.me/cveNotify/137165 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0309 · Note
• https://twitter.com/VulmonFeeds/status/1973760342804124149 · Twitter Post
• https://t.me/CVEtracker/33934 · Telegram Post