Is CVE-2019-25605 actively exploited?

No active exploitation of CVE-2019-25605 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-25605 be exploited remotely?

Yes. CVE-2019-25605 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2019-25605?

CVE-2019-25605 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2019-25605

HIGH

CVE-2019-25605

CWE-612Published: March 22, 2026· Updated: Mar 23, 2026

7.5

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.4th

Official Description

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing user account credentials.

NVD Source

Technical Analysis

CVE-2019-25605 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.