Vulnerability in Kiosoft Stored Value Unattended Payment Solution
CVE-2025-8699
Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By carefully observing changes in card dumps, one can identify fields that store the cash value of the card. Additionally, a checksum can be identified, which is created by XOR-ing the cash and an unknown field with a certain value. By updating the fields accordingly, arbitrary amounts of money can be loaded onto the card (up to $655,35) to pay for goods.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.007 (52.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 52.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000
Affected products
- Kiosoft Stored Value Unattended Payment Solution — versions Current firmware/hardware as of Q2/2025
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2025-8699?
- CVE-2025-8699 is a critical-severity vulnerability in Kiosoft Stored Value Unattended Payment Solution, classified under CWE-922. CVSS score: 9.1/10. Published 2025-09-12.
- How severe is CVE-2025-8699?
- Critical severity. CVSS v3 base score is 9.1 out of 10.
- Is CVE-2025-8699 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.