- Vendor / Project
- TeleMessage
- Product
- TM SGNL
- Date added
- May 12, 2025
- Due date
- Jun 2, 2025
- Known ransomware use
- Unknown
- CWEs
- CWE-912
Description
TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes
- Apply mitigations per vendor instructions. Absent mitigating instructions from the vendor, discontinue use of the product.
- https://nvd.nist.gov/vuln/detail/CVE-2025-47729