CVE-2025-3895

Description

Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value. It allows an unauthenticated attacker who know user login names to brute force these tokens and change account passwords (including these belonging to administrators). Version 5.20 of MegaBIP fixes this issue.

Weakness Type (CWE)

CWE-334 CWE-334

References

Other References

https://cert.pl/en/posts/2025/05/CVE-2025-3893 https://megabip.pl/index.php?id=24,145 https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej

Frequently Asked Questions

What is CVE-2025-3895? +

Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value. It allows an unauthenticated attacker who know user login names to brute force these tokens and change account passwords (including these belonging to administrators). Version 5.20 of MegaBIP fixes this issue.

How do I check if I'm vulnerable to CVE-2025-3895? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-6890 8.8

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation …

CVE-2023-6951 6.6

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a …

CVE-2024-54017 5.3

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), …

CVE-2024-52616 5.3

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them …

CVE-2024-51720 4.8

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow …