CVE-2025-2909 | THREATINT

Description

The lack of encryption in the DuoxMe (formerly Blue) application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information.

Reserved 2025-03-28 | Published 2025-03-28 | Updated 2025-03-28 | Assigner INCIBE

MEDIUM: 6.9CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-312 Cleartext Storage of Sensitive Information

Product status

Default status

unaffected

Any version before 3.3.1

affected

Credits

Fermax cybersecurity team finder

References

www.incibe.es/...-vulnerabilities-fermax-mobile-applications

cve.org (CVE-2025-2909)

nvd.nist.gov (CVE-2025-2909)

Download JSON