CVE-2025-2909 — Lack of encryption vulnerability in DuoxMe

CVE-2025-2909

Lack of encryption vulnerability in DuoxMe PUBLISHED

Description (CNA)

The lack of encryption in the DuoxMe (formerly Blue) application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information.

Affected (CNA)

Vendor / product	Versions
Fermax / DuoxMe iOS application	affected 0 before 3.3.1

CWE

CWE-312

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fermax-mobile-applications

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.