CVE-2025-55177Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Aktif olarak istismar ediliyor — Meta Platforms WhatsApp Incorrect Authorization Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 02.09.2025 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 23.09.2025.
Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://www.whatsapp.com/security/advisories/2025/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-55177
Açıklama
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| WhatsApp Business for iOS | 2.22.25.2 – < 2.25.21.78 | ||
| WhatsApp Desktop for Mac | 2.22.25.2 – < 2.25.21.78 | ||
| WhatsApp for iOS | 2.22.25.2 – < 2.25.21.73 | ||
| 2.22.25.2 – < 2.25.21.73 | |||
| whatsapp business | 2.22.25.2 – < 2.25.21.78 |
Kaynaklar ve yamalar
- https://www.facebook.com/security/advisories/cve-2025-55177 Vendor Advisory
- https://www.whatsapp.com/security/advisories/2025/ Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-55177 US Government Resource
CPE eşleşmeleri (NVD) (3)
cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*≥ 2.22.25.2 < 2.25.21.73cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:macos:*:*≥ 2.22.25.2 < 2.25.21.78cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:*≥ 2.22.25.2 < 2.25.21.78