PT-2025-9043 · Bosscomm · Bosscomm If740 System+1

Published 2025-02-27 · Updated 2025-03-01 · CVE-2025-25727

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000 Bosscomm IF740 System versions 6.25 through 6.00

Description The issue involves the storage of passwords in cleartext.

Recommendations For Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000, update the firmware to a version that securely stores passwords. For Bosscomm IF740 System versions 6.25 through 6.00, update the system to a version that securely stores passwords.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

CWE-256

Related Identifiers

CVE-2025-25727

Affected Products

Bosscomm If740 Firmware

Bosscomm If740 System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-25727 · Security Note
• https://t.me/cvedetector/19108 · Telegram Post
• https://twitter.com/CVEnew/status/1895622689194143784 · Twitter Post
• https://twitter.com/cybercronai/status/1895742132037501380 · Twitter Post
• https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet · Note
• https://t.me/cvenotify/112826 · Telegram Post
• https://t.me/cvenotify/112734 · Telegram Post