What is the CVSS score of CVE-2025-10463?

CVE-2025-10463 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Birtech Information Technologies Industry are affected by CVE-2025-10463?

CVE-2025-10463 affects Birtech Senseway systems through improper authentication mechanisms, potentially allowing unauthorized users to gain unauthorized access to sensitive systems and data.

How to fix or mitigate CVE-2025-10463?

Within 24 hours: Identify all Senseway deployments in your environment and assess network exposure; restrict access to Senseway systems to known trusted IP ranges via firewall rules. Within 7 days: Implement enhanced logging and monitoring on Senseway instances; conduct access reviews to identify suspicious authentication patterns; contact Birtech for patch timeline and interim guidance. Within 30 days: Develop a contingency plan for system replacement or isolation if patch remains unavailable; complete full security audit of affected systems; establish alternative authentication mechanisms if technically feasible.

Birtech Information Technologies Industry CVE-2025-10463

HIGH

Improper Authentication (CWE-287)

2026-02-09 iletisim@usom.gov.tr

Authentication Bypass

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 09, 2026 - 12:15 nvd

HIGH 7.3

DescriptionCVE.org

Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse.This issue affects Senseway: through 09022026.

NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.

AnalysisAI

Birtech Information Technologies Industry and Trade Ltd. Co. Senseway is affected by improper authentication (CVSS 7.3).

Technical ContextAI

This vulnerability (CWE-287: Improper Authentication) affects Birtech Information Technologies Industry and Trade Ltd. Co. Senseway. Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse.This issue affects Senseway: through 09022026.