PT-2025-9044 · Bosscomm · Bosscomm If740 System+1

Published 2025-02-27 · Updated 2025-03-01 · CVE-2025-25728

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000 Bosscomm IF740 System versions 6.25 through 6.00

Description The issue allows attackers to access sensitive information via a man-in-the-middle attack because communications to the update API are sent in plaintext.

Recommendations For Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000, consider restricting access to the update API until a secure communication method is implemented. For Bosscomm IF740 System versions 6.25 through 6.00, restrict access to the update API until a secure communication method is implemented.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-25728

Affected Products

Bosscomm If740 Firmware

Bosscomm If740 System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-25728 · Security Note
• https://twitter.com/CVEnew/status/1895622690095931739 · Twitter Post
• https://t.me/cvenotify/112826 · Telegram Post
• https://t.me/cvedetector/19109 · Telegram Post
• https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet · Note
• https://t.me/cvenotify/112734 · Telegram Post
• https://twitter.com/cybercronai/status/1895746249380311164 · Twitter Post