CVE-2025-65320

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory

High · published December 3, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

⚡ Sensitive info left unlocked! The Abacre Restaurant POS app keeps valid license keys in memory during activation, making them easy pickings for sneaky attackers. 🔥 Think of it like leaving the keys to the restaurant in plain sight while you take a break — anyone can grab them and start making orders without permission! This oversight could allow an unauthorized user to extract sensitive license keys from memory, potentially leading to unauthorized access or misuse of the POS system. The consequences? A full-blown data breach that could compromise not just the software, but also the integrity of your restaurant's operations and customer data!

Put simply

Think of it like leaving the keys to the restaurant in plain sight while you take a break — anyone can grab them and start making orders without permission! The vulnerability arises from the application's failure to encrypt sensitive license keys stored in process memory during activation attempts, leaving them exposed to any process that can access that memory space.

What to do

This oversight could allow an unauthorized user to extract sensitive license keys from memory, potentially leading to unauthorized access or misuse of the POS system. The consequences? A full-blown data breach that could compromise not just the software, but also the integrity of your restaurant's operations and customer data! Immediately update to version 15.0.0.1657 or later to patch this vulnerability. Additionally, review your memory management practices to ensure sensitive data is always encrypted during processing. Don't forget to monitor for any unusual activity in your POS systems! You've got this! With these steps, you'll be safeguarding your system in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.8th percentile
Published
2025-12-03T00:00Z
EPSS history
Timeline
  • 03 DEC 00:00Z
    Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory
    cvelistv5