PT-2025-49157 · Pivot · Pivot

Malik Makkes · CVE-2025-53704 · Published 2025-12-04 · Updated 2025-12-05

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pivot client application (affected versions not specified)

Description The password reset mechanism is weak and could allow an attacker to take over an account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2025-53704

Affected Products

Pivot

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-53704 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-338-02.json · Note
• https://maxhub.com/en/support · Note
• https://twitter.com/syedaquib77/status/1996824021724467402 · Twitter Post
• https://twitter.com/CVEnew/status/1996698857640456522 · Twitter Post
• https://t.me/CVEtracker/38871 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-338-02 · Note