CVE-2025-2311
CVSS 3.0 Score 9 of 10 (critical)
Details
Published Mar 20, 2025
Updated: Mar 21, 2025
CWE ID 295
Summary
CVE-2025-2311 is a vulnerability affecting SecHard versions before 3.3.0.20220411. The issue involves the misuse of privileged APIs, cleartext transmission of sensitive information, and insufficiently protected credentials. This combination enables Authentication Bypass, Interface Manipulation, Authentication Abuse, and harvesting of information via API event monitoring. The flaw puts systems at risk for unauthorized access and potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.