What is CVE-2025-61482?

CVE-2025-61482 is a high-severity vulnerability in N/a, classified under Information Disclosure. CVSS score: 7.2/10. Published 2025-10-27.

How severe is CVE-2025-61482?

High severity. CVSS v3 base score is 7.2 out of 10.

Information disclosure in N/a

CVE-2025-61482

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets, enabling generation of valid one-time passwords, and bypassing authentication for enrolled accounts.

Vulnerability class: Information Disclosure

EPSS: 0.001 (3.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-61482?: CVE-2025-61482 is a high-severity vulnerability in N/a, classified under Information Disclosure. CVSS score: 7.2/10. Published 2025-10-27.
How severe is CVE-2025-61482?: High severity. CVSS v3 base score is 7.2 out of 10.