CVEvulnerability

CVE-2025-41257

4.8 MEDIUM Published 2026-03-04 Modified 2026-06-17 Official page ↗
Status
Awaiting Analysis
Published
2026-03-04
Last modified
2026-06-17
Assigner
1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a
CVSS 3.1 (1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a)
4.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-20

Description

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References