{"id":"CVE-2025-48925","aliases":["EUVD-2025-16211","GHSA-g7m2-hjxw-27h7"],"status":"published","title":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to...","description":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00275,"percentile":0.20118,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-836"],"published":"2025-05-28T00:00:00Z","modified":"2026-06-17T09:30:29Z","products":[{"vendor":"smarsh","product":"telemessage"},{"vendor":"telemessage","product":"service"}],"references":[{"url":"https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/","tags":["Press/Media Coverage"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48925"},{"url":"https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes"},{"url":"https://github.com/advisories/GHSA-g7m2-hjxw-27h7"}],"sources":{"cve":[{"id":"CVE-2025-48925","description":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.","status":"published","published":"2025-05-28T00:00:00Z","modified":"2025-07-01T19:48:30.412Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-836"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-16211","description":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.","status":"published","published":"2025-05-28T00:00:00Z","modified":"2025-07-01T19:48:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:14.813568Z"}],"ghsa":[{"id":"GHSA-g7m2-hjxw-27h7","title":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to...","description":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential, as exploited in the wild in May 2025.","status":"published","published":"2025-05-28T18:33:28Z","modified":"2025-05-28T18:33:35Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-836"],"updated_at":"2026-11-02T15:02:28.524565Z"}],"nvd":[{"id":"CVE-2025-48925","description":"The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.","status":"published","published":"2025-05-28T17:15:24.45Z","modified":"2026-06-17T09:30:29.623Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-836"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}