CVE-2025-2190

CVE-2025-2190

Vendor Tecno

Product com.transsnet.store

Weakness CWE-297

Published March 11, 2025

Last update September 9, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.

Key dates

02Disclosure timeline

March 11, 2025 CVE published

September 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-2190 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/297.html

Related vulnerabilities

04Related CVE

CVE-2024-12925 Host Header Injection in Akinsoft's QR Menu CVE-2023-34143 Improper Validation of Certificate Vulnerability in Hitachi Device Manager CVE-2024-54019 CVE-2025-68161 Apache Log4j Core: Missing TLS hostname verification in Socket appender CVE-2022-48306 Gotham Chat IRC help does not validate hostnames in TLS certificates