Hard-coded Credentials Vulnerability in Logo Software TigerWings ERP
CVE-2025-10609

5.9MEDIUM

Key Information:

Vendor
CVE Published:
3 October 2025

What is CVE-2025-10609?

A hard-coded credentials vulnerability in Logo Software's TigerWings ERP allows unauthorized access to sensitive constants within an executable. This flaw poses a risk to data integrity by enabling attackers to exploit the hard-coded credentials, potentially leading to data leaks and system compromises. The affected versions include all TigerWings ERP releases from 01.01.00 to just before 3.03.00, highlighting the need for users to review their systems for this security risk and implement necessary updates or mitigations.

Affected Version(s)

TigerWings ERP 01.01.00 < 3.03.00

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Oguzhan Karasu
.
CVE-2025-10609 : Hard-coded Credentials Vulnerability in Logo Software TigerWings ERP