CVE-2025-41257 — Suprema BioStar 2 Insecure Password Change
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to …
Published: 2026-03-04 · CVSS: 4.8 · CVSS 3.1
Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7