Skip to main content

E Tms EUVDEUVD-2025-32625

| CVE-2025-59745 HIGH
Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
2025-10-02 cve-coordination@incibe.es
Information Disclosure E Tms Andsoft
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 13, 2026 - 19:12 euvd
EUVD-2025-32625
Analysis Generated
Mar 13, 2026 - 19:12 vuln.today
CVE Published
Oct 02, 2025 - 15:15 nvd
HIGH 7.5

DescriptionCVE.org

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

Analysis

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

Technical ContextAI

This vulnerability is classified as Use of a Broken or Risky Cryptographic Algorithm (CWE-327).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in E Tms

View all
CVE-2025-59740 CRITICAL POC
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59739 CRITICAL POC
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59738 CRITICAL POC
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59737 CRITICAL POC
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59736 CRITICAL POC
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59741 CRITICAL
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59735 CRITICAL
9.8 Oct 02

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs
CVE-2025-59743 CRITICAL
9.8 Oct 02

SQL injection in AndSoft e-TMS v25.03 allows database compromise.
CVE-2025-59742 CRITICAL
9.8 Oct 02

SQL injection in AndSoft e-TMS v25.03 allows database compromise.
CVE-2025-59744 HIGH
7.5 Oct 02

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only withi
CVE-2025-59774 MEDIUM
6.1 Oct 02

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to e
CVE-2025-59773 MEDIUM
6.1 Oct 02

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to e

Same weakness CWE-327 – Use of a Broken or Risky Cryptographic Algorithm

View all
CVE-2022-3365 CRITICAL POC
9.8
CVE-2014-8687 CRITICAL POC
9.8
CVE-2017-17382 MEDIUM POC
5.9
CVE-2016-6602 CRITICAL POC
9.8
CVE-2023-34039 CRITICAL POC
9.8
CVE-2025-2539 HIGH POC
7.5
CVE-2017-9466 CRITICAL POC
9.8
CVE-2023-5347 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2025-32625 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy