Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-41257

Suprema BioStar 2 Insecure Password Change

Description

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Suprema BioStar 2

Default version status: unknown

  • 2.9.11.6affected

References