PT-2025-48681 · Argus Technology · Bilger

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-13295

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Argus Technology Inc. BILGER versions prior to 2.4.9

Description A flaw exists in Argus Technology Inc. BILGER that allows for the insertion of sensitive information into sent data through the manipulation of message identifiers. The issue centers around the ability to choose a message identifier, potentially exposing sensitive data.

Recommendations Update Argus Technology Inc. BILGER to version 2.4.9 or later.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-13295

Affected Products

Bilger

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13295 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0423 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-13295 · Vendor Advisory
• https://twitter.com/CVEnew/status/1995860136036835669 · Twitter Post