CVE-2025-4319

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-4319
Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

9.4 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0005
https://www.usom.gov.tr/bildirim/tr-26-0005
Configurations

No configuration.

History

05 Jun 2026, 16:16

Type Values Removed Values Added
Summary (en) Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation.This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. (en) Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
  • () https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0005 -

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary
  • (es) Restricción inadecuada de intentos de autenticación excesivos. Vulnerabilidad de mecanismo débil de recuperación de contraseña para contraseña olvidada en Birebirsoft Software y Technology Solutions Sufirmam permite Fuerza Bruta y Explotar la recuperación de contraseña. Este problema afecta a Sufirmam: hasta el 23012026. NOTA: Antes de divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera.

23 Jan 2026, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-23 13:15

Updated : 2026-06-17 09:33

NVD link : CVE-2025-4319

Mitre link : CVE-2025-4319

CVE.ORG link : CVE-2025-4319

JSON object : View

Products Affected

No product.

CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts

CWE-640

Weak Password Recovery Mechanism for Forgotten Password