Cleartext password storage in Birtech Information Technologies' Sensaway
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-312.
Summary
Insecure Storage of Sensitive Information vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Retrieve Embedded Sensitive Data. This issue affects Senseway: through 09022026. NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the relevant vulnerabilities. Users of the Sensaway application are advised to contact the manufacturer and review updated products developed with newer technology.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Birtech Information Technologies Industry and Trade Ltd. Co. | Senseway | up to 09022026 | — | No fix listed | CNA |
- Senseway VendorBirtech Information Technologies Industry and Trade Ltd. Co. Affected up to 09022026 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-10464
- 2026-10-03 Alias added: GHSA-46m4-w92r-69hm
References
More Birtech Information Technologies Industry and Trade Ltd. Co. vulnerabilities
- TI-2025-09595 Unrestricted File Upload in Birtech Information Technologies' Sensaway CVSS 3.1HIGH 8.8
- TI-2025-09593 Improper Authentication in Birtech Information Technologies' Sensaway CVSS 3.1HIGH 7.3
Sources
- CVE-2025-10464 · CVE Program
- CVE-2025-10464 · NVD
- FIRST EPSS
- GHSA-46m4-w92r-69hm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences