nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-2190 CVE-2025-2190
HIGH
Record summary
CVE-2025-2190 has a selected CVSS score of 8.1 (high).
Description
The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 11, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
com.transsnet.storeBrowse TECNO / com.transsnet.storeDefault status: unaffected | CVE List | 9.1.0 to < 9.2.6 | affected |
References
3security.tecno.com
https://security.tecno.com/SRC/blogdetail/393?lang=en_US security.tecno.com
https://security.tecno.com/SRC/securityUpdates