« Volver al listado

CVE-2025-4737

Estado: AplazadaMedia (6.2)—

Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Transsion — AivoiceassistantAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-4737",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-4737",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-15T16:02:46.336231Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "affectedData": [
        {
          "vendor": "TECNO",
          "product": "com.transsion.aivoiceassistant",
          "versions": [
            {
              "status": "affected",
              "version": "4.1.1.014",
              "versionType": "custom",
              "lessThanOrEqual": "≤4.3.0.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-15T08:15:17.710",
  "references": [
    {
      "url": "https://security.tecno.com/SRC/blogdetail/422?lang=en_US",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    },
    {
      "url": "https://security.tecno.com/SRC/securityUpdates",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de cifrado insuficiente en la aplicación móvil (com.transsion.aivoiceassistant) puede generar el riesgo de fuga de información confidencial."
    }
  ],
  "lastModified": "2026-06-17T09:33:54.117",
  "sourceIdentifier": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"
}