by Kastro
Paper/Archive/CVE-2025-2311

CVE-2025-2311

Sechard Information Technologies SecHard — Authentication Bypass in Sechard Information Technologies' SecHard

EPSS 0.2%CVSS 9.0
critical.is priorityof 100
28
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 6.8.068 × 201.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411.

Affected

ProductAffectedFixed inSource
SecHard< 3.3.0.202204113.3.0.20220411CNA

Scores by source

TR-CERT (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0074refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0074