CVE-2025-7355 - IDOR in Beefull Energy Technologies' Beefull App

Back Back to CVE browser

MEDIUM

IDOR in Beefull Energy Technologies' Beefull App

Published Sep 16, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers.

This issue affects Beefull App: before 24.07.2025.

Affected products

Vendor Beefull Energy Technologies Product Beefull App Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <24.07.2025

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Beefull Energy Technologies

Beefull App

unaffected

Version	Status	Constraints
0	affected	<24.07.2025

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0255
government-resource
https://www.usom.gov.tr/bildirim/tr-25-0255
government-resourcebroken-link

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0255		government-resource
https://www.usom.gov.tr/bildirim/tr-25-0255		government-resourcebroken-link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TR-CERT

Published Sep 16, 2025

Updated Jun 5, 2026

Reserved Jul 8, 2025

Link CVE-2025-7355

CISA Vulnrichment

Updated Sep 16, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-7355

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-7355