PT-2025-9045 · Bosscomm · Bosscomm If740 System+1

Published 2025-02-27 · Updated 2025-03-05 · CVE-2025-25729

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000 Bosscomm IF740 System versions 6.25 through 6.00

Description An information disclosure issue allows attackers to obtain hardcoded cleartext credentials via the update or boot process.

Recommendations For Bosscomm IF740 Firmware versions 11001.7078 through 11001.0000, update the firmware to remove hardcoded credentials. For Bosscomm IF740 System versions 6.25 through 6.00, restrict access to the update and boot processes until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-25729

Affected Products

Bosscomm If740 Firmware

Bosscomm If740 System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-25729 · Security Note
• https://gainsec.com/2025/02/27/cve-2025-25727cve-2025-25728cve-2025-25729-multiple-vulnerabilities-found-in-bosscomm-obd2-tablet · Note
• https://t.me/cvedetector/19110 · Telegram Post
• https://twitter.com/CVEnew/status/1895622690905506062 · Twitter Post
• https://t.me/cvenotify/112826 · Telegram Post
• https://twitter.com/cracbot/status/1897240753077882924 · Twitter Post
• https://t.me/cvenotify/112734 · Telegram Post
• https://twitter.com/cybercronai/status/1895749733215310000 · Twitter Post