Authorization Bypass in PosCube Assist Software by PosCube Hardware Software and Consulting Ltd.
CVE-2025-0642

6.3MEDIUM

Key Information:

Vendor

Poscube Hardware Software And Consulting Ltd. Co.

Status
Assist
Vendor
CVE Published:
2 October 2025

What is CVE-2025-0642?

The vulnerability in PosCube Assist software involves the use of hard-coded credentials that lead to an authorization bypass. Attackers may exploit this vulnerability to gain unauthorized access and perform sensitive actions without proper authentication. This affects versions of Assist up to 10.02.2025, posing significant security risks for users relying on this software.

Affected Version(s)

Assist 0 <= 10.02.2025

References

https://www.usom.gov.tr/bildirim/tr-25-0309

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Şahnur Eren ALOĞLU
JSON
.
CVE-2025-0642 : Authorization Bypass in PosCube Assist Software by PosCube Hardware Software and Consulting Ltd.