Vulnerability · Published Oct 2, 2025 · Assigned by INCIBE
CVE-2025-59745Multiple vulnerabilities in AndSoft's e-TMS
Medium 6.9
In plain English
A medium-severity broken cryptography in e-TMS from AndSoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.
Affected products (as reported)
Weakness: CWE-327 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N