Vulnerability · Published Apr 23, 2025 · Assigned by CERT-In
CVE-2025-42604Detailed Error Response Vulnerability in Meon KYC solutions
Medium 6.9
In plain English
A medium-severity security flaw in KYC solutions from Meon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.5%top 57.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Meon | KYC solutions | 1.1 |
Weakness: CWE-1295 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0082 third-party-advisory