BaseFortify

Publication date: 2025-10-03

Last updated on: 2026-06-05

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2026-06-05

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10609

EUVD

EUVD-2025-32503

Affected Vendors & Products

Vendor	Product	Version / Range
logo_software_inc	tigerwings_erp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves the use of hard-coded credentials in Logo Software Inc.'s TigerWings ERP software. It allows an attacker to read sensitive constants within the executable, potentially exposing important information embedded in the software. This issue affects versions of TigerWings ERP before 3.03.00.

Impact Analysis

The vulnerability can impact you by allowing an attacker with limited privileges to read sensitive information embedded in the software, which could lead to further exploitation or unauthorized actions. The CVSS score indicates a high impact on integrity and a low impact on availability, meaning the attacker could alter data or behavior but not necessarily disrupt service.

Hi! I’m here to help you understand CVE-2025-10609. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70