CVE-2025-2908

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files.

Score

CVSS 4.0 8.5 High

Status

Deferred - cve-coordination@incibe.es

Published

2025-03-28

Last modified

2025-03-28

Weaknesses

CWE-522

Affected products

• Meetme (Fermax)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fermax-mobile-applications