CVE-2025-3329

Katalog CVE

CVSS 3.1 · Low EPSS 0,35%

Kerentanan Cryptographic Issues pada consumer comanda mobile. Skor CVSS 3.1 3.1 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

7 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.1 (Low), sumber vuldb.com
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-310: Cryptographic Issues
CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.303543 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.551790 advisory pihak ketiga · vdb entry
• https://medium.com/@davimouar/from-order-to-exploit-a-deep-dive-into-restaurant-network-security-64aeaf3a6f64 exploit
• https://vuldb.com/?ctiid.303543 permissions required · vdb entry