CVE-2025-63823

Received Received - Intake

Hardcoded Credentials in Safetipin Android App

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: MITRE

Description

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-06

EPSS Evaluated

N/A

NVD

CVE-2025-63823

Affected Vendors & Products

Vendor	Product	Version / Range
safetipin	safetipin_android_application	5.2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

The My Safetipin Android Application version 5.2.1 has hardcoded credentials in its authentication module. This means the app contains fixed, embedded login details that should not be exposed. Attackers can exploit this by predicting OTP values to bypass authentication and gain unauthorized access to user accounts.

Impact Analysis

If you use this app, attackers could impersonate you by bypassing login protections. They may access your personal data, account details, or perform actions on your behalf without consent. This could lead to identity theft, data breaches, or misuse of your account.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for secure authentication and data protection. It exposes user data to unauthorized access, failing to implement proper security controls. Organizations using this app may face regulatory penalties for non-compliance.

Mitigation Strategies

Immediately update the My Safetipin Android Application to the latest version to remove hardcoded credentials. Review authentication logs for suspicious OTP-based login attempts and disable any affected user accounts if unauthorized access is detected.

Hi! I’m here to help you understand CVE-2025-63823. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70