Vulnerability in Andsoft E-Tms
CVE-2025-59745
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (14.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 14.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.000
Affected products
- Andsoft E-Tms — versions 25.03, v25.03 version
Weakness classification (CWE)
References
- www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabili… (Third Party Advisory)
Frequently asked questions
- What is CVE-2025-59745?
- CVE-2025-59745 is a high-severity vulnerability in Andsoft E-Tms, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2025-10-02.
- How severe is CVE-2025-59745?
- High severity. CVSS v3 base score is 7.5 out of 10.