Vulnerability in Andsoft E-Tms
CVE-2025-59745
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.002 (14.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Andsoft E-tms — versions 25.03, v25.03 version
Weakness classification (CWE)
References
- cve-coordination@incibe.es (Third Party Advisory)
Frequently asked questions
- What is CVE-2025-59745?
- CVE-2025-59745 is a high-severity vulnerability in Andsoft E-Tms, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2025-10-02.
- How severe is CVE-2025-59745?
- High severity. CVSS v3 base score is 7.5 out of 10.