CVE-2025-2909

The lack of encryption in the DuoxMe (formerly Blue) application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - cve-coordination@incibe.es

Published

2025-03-28

Last modified

2025-03-28

Weaknesses

CWE-312

Affected products

• Duoxme Ios Application (Fermax)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fermax-mobile-applications