CVE-2025-2911
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 28, 2025
CWE ID 121
Summary
CVE-2025-2911 is a vulnerability affecting MeetMe products prior to version 2024-09. This issue grants unauthorized access to the call forwarding service system, enabling attackers to identify numerous users and execute brute force attacks through extensions. The vulnerability poses a significant risk as it allows attackers to gain unauthorized access to user information, potentially leading to privacy breaches and further cyberattacks. MeetMe urges users to upgrade to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd