CVE-2025-4319 - CVE House
Back to Database
Status published Critical CVE-2025-4319

Improper Access Control in Birebirsoft's Sufirmam

Vulnerability Description

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4319

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Hüseyin ÜZÜM

References

More from Birebirsoft Software and Technology Solutions

View All →
CVE-2025-4320
Information Disclosure in Birebirsoft's Sufirmam
Critical 10

Affected Vendor

Birebirsoft Software and Technology Solutions

View all reports →

Affected Software

Sufirmam
Vulnerable Versions:
0

Timeline

Official Publish: January 23rd, 2026
Last Modified: June 5th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Weaknesses (CWE)

CWE-307 CWE-640

MITRE ATT&CK TTPs

T1110 Brute Force
Credential Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1562 Impair Defenses
Defense Evasion