Vulnerability Description
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the "2fa_authorized" Local Storage key
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mytaag | Mytaag | <= 2024-11-24 |
Related Weaknesses (CWE)
References
- https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/ExploitThird Party Advisory
FAQ
What is CVE-2025-25451?
CVE-2025-25451 is a vulnerability with a CVSS score of 5.1 (MEDIUM). An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the "2fa_authorized" Local Storage key
How severe is CVE-2025-25451?
CVE-2025-25451 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-25451?
Check the references section above for vendor advisories and patch information. Affected products include: Mytaag Mytaag.