---
id: CVE-2025-59745
title: >-
  Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which
  uses MD5 to encrypt passwords
summary: >-
  Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which
  uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash
  algorithm and is no longer considered secure for storing or transmitting
  passwords. I…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-327
vendor: andsoft
product: e-tms
affected:
  - e-tms = 25.03
published: '2025-10-02'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-59745'
references:
  - url: >-
      https://www.incibe.es/en/incibe-cert/notices/aviso/update-24092025-multiple-vulnerabilities-andsofts-e-tms
    label: cve-coordination@incibe.es
tags:
  - nvd
epss: 0.0025
epssPercentile: 0.15053
ingestedAt: '2026-10-12T15:55:08.083Z'
---

## Overview

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

## Affected

- `e-tms = 25.03`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.