Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-2909

Lack of encryption vulnerability in DuoxMe

Description

The lack of encryption in the DuoxMe (formerly Blue) application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fermax DuoxMe iOS application

Default version status: unaffected

  • 0 to < 3.3.1affected

References