CVE-2025-48925

Summary

The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.

Affected Software

VendorProductVersion RangeStatus
TeleMessageservice0 <= 2025-05-05affected

Weaknesses

  • CWE-836: CWE-836 Use of Password Hash Instead of Password for Authentication

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References