Critical severity9.0NVD Advisory· Published Mar 20, 2025· Updated Jun 6, 2026

CVE-2025-2311

Description

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.

This issue affects SecHard: before 3.3.0.20220411.

Affected products

SecHard Information Technologies/SecHardllm-fuzzy
Range: <3.3.0.20220411

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0074nvd
www.usom.gov.tr/bildirim/tr-25-0074nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000