CVE-2025-25728

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack.

Published 2025-02-28. Last modified 2026-06-17.