What is the CVSS score of CVE-2025-47147?

CVE-2025-47147 has a CVSS 3.1 base score of 5.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Android are affected by CVE-2025-47147?

CVE-2025-47147 presents moderate security risk, a cleartext storage vulnerability rated CVSS 5.7. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-47147?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

Android CVE-2025-47147

MEDIUM

Cleartext Storage of Sensitive Information (CWE-312)

2026-03-03 disclosures@gallagher.com

Android

5.7

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 03:15 nvd

MEDIUM 5.7

DescriptionNVD

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions prior to 9.40.123.

AnalysisAI

s mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions up to 9.40.123. is affected by cleartext storage of sensitive information (CVSS 5.7).

Technical ContextAI

This vulnerability (CWE-312: Cleartext Storage of Sensitive Information) affects s mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client. Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions prior to 9.40.123.

Affected ProductsAI

Product: s mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client. Versions: up to 9.40.123..

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-47147 vulnerability details – vuln.today

Back

Android CVE-2025-47147

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code