Description (CNA)
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Suprema / BioStar 2 | affected 2.9.11.6 |
CWE
CWE-20
References
- https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20251104-02_Suprema_BioStar_2_Insecure_Password_Change
- https://www.supremainc.com/en/platform/hybrid-security-platform-biostar-2.asp
ADP enrichment
No English description supplied.