VULNERABILITY INTELLIGENCE
CVE-2025-41257
CVSS score4.8 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.
Weakness classification
- 1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a: CWE-20