CVE Catalog
CVE-2025-63823
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.27%
18th percentile - higher than 18% of all known CVEs
Summary
My Safetipin Android Application 5.2.1 contains hardcoded credentials in the authentication module, allowing remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.
Risk Assessment
Attackers can take over user accounts, leading to privacy breaches and potential theft of personal data.
Recommendation
Update the app to a patched version if available, and enforce stronger authentication mechanisms.
Original NVD description (English source)
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.