Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-41086

Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions. The validator uses an insecure checksum algorithm; knowing this algorithm and the format of the license lines, an attacker can recalculate the checksum and generate a valid license to grant themselves full privileges without credentials or access to the source code, allowing them unrestricted access to GAMS's mathematical models and commercial solvers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.1%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-41086
  • Gams » Gams » Version: 20.1
    cpe:2.3:a:gams:gams:20.1
  • Gams » Gams » Version: 20.2
    cpe:2.3:a:gams:gams:20.2
  • Gams » Gams » Version: 20.3
    cpe:2.3:a:gams:gams:20.3
  • Gams » Gams » Version: 20.4
    cpe:2.3:a:gams:gams:20.4
  • Gams » Gams » Version: 20.5
    cpe:2.3:a:gams:gams:20.5
  • Gams » Gams » Version: 20.6
    cpe:2.3:a:gams:gams:20.6
  • Gams » Gams » Version: 20.7
    cpe:2.3:a:gams:gams:20.7
  • Gams » Gams » Version: 21.0
    cpe:2.3:a:gams:gams:21.0
  • Gams » Gams » Version: 21.1
    cpe:2.3:a:gams:gams:21.1
  • Gams » Gams » Version: 21.2
    cpe:2.3:a:gams:gams:21.2
  • Gams » Gams » Version: 21.3
    cpe:2.3:a:gams:gams:21.3
  • Gams » Gams » Version: 21.4
    cpe:2.3:a:gams:gams:21.4
  • Gams » Gams » Version: 21.5
    cpe:2.3:a:gams:gams:21.5
  • Gams » Gams » Version: 21.6
    cpe:2.3:a:gams:gams:21.6
  • Gams » Gams » Version: 21.7
    cpe:2.3:a:gams:gams:21.7
  • Gams » Gams » Version: 22.0
    cpe:2.3:a:gams:gams:22.0
  • Gams » Gams » Version: 22.1
    cpe:2.3:a:gams:gams:22.1
  • Gams » Gams » Version: 22.2
    cpe:2.3:a:gams:gams:22.2
  • Gams » Gams » Version: 22.3
    cpe:2.3:a:gams:gams:22.3
  • Gams » Gams » Version: 22.4
    cpe:2.3:a:gams:gams:22.4
  • Gams » Gams » Version: 22.5
    cpe:2.3:a:gams:gams:22.5
  • Gams » Gams » Version: 22.6
    cpe:2.3:a:gams:gams:22.6
  • Gams » Gams » Version: 22.7.1
    cpe:2.3:a:gams:gams:22.7.1
  • Gams » Gams » Version: 22.7.2
    cpe:2.3:a:gams:gams:22.7.2
  • Gams » Gams » Version: 22.8.1
    cpe:2.3:a:gams:gams:22.8.1
  • Gams » Gams » Version: 22.9.2
    cpe:2.3:a:gams:gams:22.9.2
  • Gams » Gams » Version: 23.0.2
    cpe:2.3:a:gams:gams:23.0.2
  • Gams » Gams » Version: 23.1.1
    cpe:2.3:a:gams:gams:23.1.1
  • Gams » Gams » Version: 23.1.2
    cpe:2.3:a:gams:gams:23.1.2
  • Gams » Gams » Version: 23.2.1
    cpe:2.3:a:gams:gams:23.2.1
  • Gams » Gams » Version: 23.3.1
    cpe:2.3:a:gams:gams:23.3.1
  • Gams » Gams » Version: 23.3.2
    cpe:2.3:a:gams:gams:23.3.2
  • Gams » Gams » Version: 23.3.3
    cpe:2.3:a:gams:gams:23.3.3
  • Gams » Gams » Version: 23.4.1
    cpe:2.3:a:gams:gams:23.4.1
  • Gams » Gams » Version: 23.4.3
    cpe:2.3:a:gams:gams:23.4.3
  • Gams » Gams » Version: 23.5.1
    cpe:2.3:a:gams:gams:23.5.1
  • Gams » Gams » Version: 23.5.2
    cpe:2.3:a:gams:gams:23.5.2
  • Gams » Gams » Version: 23.6.2
    cpe:2.3:a:gams:gams:23.6.2
  • Gams » Gams » Version: 23.6.3
    cpe:2.3:a:gams:gams:23.6.3
  • Gams » Gams » Version: 23.6.4
    cpe:2.3:a:gams:gams:23.6.4
  • Gams » Gams » Version: 23.6.5
    cpe:2.3:a:gams:gams:23.6.5
  • Gams » Gams » Version: 23.7.1
    cpe:2.3:a:gams:gams:23.7.1
  • Gams » Gams » Version: 23.7.2
    cpe:2.3:a:gams:gams:23.7.2
  • Gams » Gams » Version: 23.7.3
    cpe:2.3:a:gams:gams:23.7.3
  • Gams » Gams » Version: 23.8.1
    cpe:2.3:a:gams:gams:23.8.1
  • Gams » Gams » Version: 23.8.2
    cpe:2.3:a:gams:gams:23.8.2
  • Gams » Gams » Version: 23.9.1
    cpe:2.3:a:gams:gams:23.9.1
  • Gams » Gams » Version: 23.9.2
    cpe:2.3:a:gams:gams:23.9.2
  • Gams » Gams » Version: 23.9.3
    cpe:2.3:a:gams:gams:23.9.3
  • Gams » Gams » Version: 23.9.4
    cpe:2.3:a:gams:gams:23.9.4
  • Gams » Gams » Version: 23.9.5
    cpe:2.3:a:gams:gams:23.9.5
  • Gams » Gams » Version: 24.0.1
    cpe:2.3:a:gams:gams:24.0.1
  • Gams » Gams » Version: 24.0.2
    cpe:2.3:a:gams:gams:24.0.2
  • Gams » Gams » Version: 24.1.1
    cpe:2.3:a:gams:gams:24.1.1
  • Gams » Gams » Version: 24.1.2
    cpe:2.3:a:gams:gams:24.1.2
  • Gams » Gams » Version: 24.1.3
    cpe:2.3:a:gams:gams:24.1.3
  • Gams » Gams » Version: 24.2.1
    cpe:2.3:a:gams:gams:24.2.1
  • Gams » Gams » Version: 24.2.2
    cpe:2.3:a:gams:gams:24.2.2
  • Gams » Gams » Version: 24.2.3
    cpe:2.3:a:gams:gams:24.2.3
  • Gams » Gams » Version: 24.3.1
    cpe:2.3:a:gams:gams:24.3.1
  • Gams » Gams » Version: 24.3.2
    cpe:2.3:a:gams:gams:24.3.2
  • Gams » Gams » Version: 24.3.3
    cpe:2.3:a:gams:gams:24.3.3
  • Gams » Gams » Version: 24.4.1
    cpe:2.3:a:gams:gams:24.4.1
  • Gams » Gams » Version: 24.4.2
    cpe:2.3:a:gams:gams:24.4.2
  • Gams » Gams » Version: 24.4.3
    cpe:2.3:a:gams:gams:24.4.3
  • Gams » Gams » Version: 24.4.4
    cpe:2.3:a:gams:gams:24.4.4
  • Gams » Gams » Version: 24.4.5
    cpe:2.3:a:gams:gams:24.4.5
  • Gams » Gams » Version: 24.4.6
    cpe:2.3:a:gams:gams:24.4.6
  • Gams » Gams » Version: 24.5.1
    cpe:2.3:a:gams:gams:24.5.1
  • Gams » Gams » Version: 24.5.2
    cpe:2.3:a:gams:gams:24.5.2
  • Gams » Gams » Version: 24.5.3
    cpe:2.3:a:gams:gams:24.5.3
  • Gams » Gams » Version: 24.5.4
    cpe:2.3:a:gams:gams:24.5.4
  • Gams » Gams » Version: 24.5.5
    cpe:2.3:a:gams:gams:24.5.5
  • Gams » Gams » Version: 24.5.6
    cpe:2.3:a:gams:gams:24.5.6
  • Gams » Gams » Version: 24.6.1
    cpe:2.3:a:gams:gams:24.6.1
  • Gams » Gams » Version: 24.7.1
    cpe:2.3:a:gams:gams:24.7.1
  • Gams » Gams » Version: 24.7.2
    cpe:2.3:a:gams:gams:24.7.2
  • Gams » Gams » Version: 24.7.3
    cpe:2.3:a:gams:gams:24.7.3
  • Gams » Gams » Version: 24.7.4
    cpe:2.3:a:gams:gams:24.7.4
  • Gams » Gams » Version: 24.8.1
    cpe:2.3:a:gams:gams:24.8.1
  • Gams » Gams » Version: 24.8.2
    cpe:2.3:a:gams:gams:24.8.2
  • Gams » Gams » Version: 24.8.3
    cpe:2.3:a:gams:gams:24.8.3
  • Gams » Gams » Version: 24.8.4
    cpe:2.3:a:gams:gams:24.8.4
  • Gams » Gams » Version: 24.8.5
    cpe:2.3:a:gams:gams:24.8.5
  • Gams » Gams » Version: 24.9.1
    cpe:2.3:a:gams:gams:24.9.1
  • Gams » Gams » Version: 24.9.2
    cpe:2.3:a:gams:gams:24.9.2
  • Gams » Gams » Version: 25.0.1
    cpe:2.3:a:gams:gams:25.0.1
  • Gams » Gams » Version: 25.0.2
    cpe:2.3:a:gams:gams:25.0.2
  • Gams » Gams » Version: 25.0.3
    cpe:2.3:a:gams:gams:25.0.3
  • Gams » Gams » Version: 25.1.1
    cpe:2.3:a:gams:gams:25.1.1
  • Gams » Gams » Version: 25.1.2
    cpe:2.3:a:gams:gams:25.1.2
  • Gams » Gams » Version: 25.1.3
    cpe:2.3:a:gams:gams:25.1.3
  • Gams » Gams » Version: 26.1.0
    cpe:2.3:a:gams:gams:26.1.0
  • Gams » Gams » Version: 27.1.0
    cpe:2.3:a:gams:gams:27.1.0
  • Gams » Gams » Version: 27.2.0
    cpe:2.3:a:gams:gams:27.2.0
  • Gams » Gams » Version: 27.3.0
    cpe:2.3:a:gams:gams:27.3.0
  • Gams » Gams » Version: 28.1.0
    cpe:2.3:a:gams:gams:28.1.0
  • Gams » Gams » Version: 28.2.0
    cpe:2.3:a:gams:gams:28.2.0
  • Gams » Gams » Version: 29.1.0
    cpe:2.3:a:gams:gams:29.1.0
  • Gams » Gams » Version: 30.1.0
    cpe:2.3:a:gams:gams:30.1.0
  • Gams » Gams » Version: 30.2.0
    cpe:2.3:a:gams:gams:30.2.0
  • Gams » Gams » Version: 30.3.0
    cpe:2.3:a:gams:gams:30.3.0
  • Gams » Gams » Version: 31.1.0
    cpe:2.3:a:gams:gams:31.1.0
  • Gams » Gams » Version: 31.1.1
    cpe:2.3:a:gams:gams:31.1.1
  • Gams » Gams » Version: 31.2.0
    cpe:2.3:a:gams:gams:31.2.0
  • Gams » Gams » Version: 32.1.0
    cpe:2.3:a:gams:gams:32.1.0
  • Gams » Gams » Version: 32.2.0
    cpe:2.3:a:gams:gams:32.2.0
  • Gams » Gams » Version: 33.1.0
    cpe:2.3:a:gams:gams:33.1.0
  • Gams » Gams » Version: 33.2.0
    cpe:2.3:a:gams:gams:33.2.0
  • Gams » Gams » Version: 34.1.0
    cpe:2.3:a:gams:gams:34.1.0
  • Gams » Gams » Version: 34.2.0
    cpe:2.3:a:gams:gams:34.2.0
  • Gams » Gams » Version: 34.3.0
    cpe:2.3:a:gams:gams:34.3.0
  • Gams » Gams » Version: 35.1.0
    cpe:2.3:a:gams:gams:35.1.0
  • Gams » Gams » Version: 35.2.0
    cpe:2.3:a:gams:gams:35.2.0
  • Gams » Gams » Version: 36.1.0
    cpe:2.3:a:gams:gams:36.1.0
  • Gams » Gams » Version: 36.2.0
    cpe:2.3:a:gams:gams:36.2.0
  • Gams » Gams » Version: 37.1.0
    cpe:2.3:a:gams:gams:37.1.0
  • Gams » Gams » Version: 38.1.0
    cpe:2.3:a:gams:gams:38.1.0
  • Gams » Gams » Version: 38.2.0
    cpe:2.3:a:gams:gams:38.2.0
  • Gams » Gams » Version: 38.2.1
    cpe:2.3:a:gams:gams:38.2.1
  • Gams » Gams » Version: 38.3.0
    cpe:2.3:a:gams:gams:38.3.0
  • Gams » Gams » Version: 39.1.0
    cpe:2.3:a:gams:gams:39.1.0
  • Gams » Gams » Version: 39.1.1
    cpe:2.3:a:gams:gams:39.1.1
  • Gams » Gams » Version: 39.2.0
    cpe:2.3:a:gams:gams:39.2.0
  • Gams » Gams » Version: 39.2.1
    cpe:2.3:a:gams:gams:39.2.1
  • Gams » Gams » Version: 39.3.0
    cpe:2.3:a:gams:gams:39.3.0
  • Gams » Gams » Version: 40.1.0
    cpe:2.3:a:gams:gams:40.1.0
  • Gams » Gams » Version: 40.1.1
    cpe:2.3:a:gams:gams:40.1.1
  • Gams » Gams » Version: 40.2.0
    cpe:2.3:a:gams:gams:40.2.0
  • Gams » Gams » Version: 40.3.0
    cpe:2.3:a:gams:gams:40.3.0
  • Gams » Gams » Version: 40.4.0
    cpe:2.3:a:gams:gams:40.4.0
  • Gams » Gams » Version: 41.1.0
    cpe:2.3:a:gams:gams:41.1.0
  • Gams » Gams » Version: 41.2.0
    cpe:2.3:a:gams:gams:41.2.0
  • Gams » Gams » Version: 41.3.0
    cpe:2.3:a:gams:gams:41.3.0
  • Gams » Gams » Version: 41.4.0
    cpe:2.3:a:gams:gams:41.4.0
  • Gams » Gams » Version: 41.5.0
    cpe:2.3:a:gams:gams:41.5.0
  • Gams » Gams » Version: 42.1.0
    cpe:2.3:a:gams:gams:42.1.0
  • Gams » Gams » Version: 42.2.0
    cpe:2.3:a:gams:gams:42.2.0
  • Gams » Gams » Version: 42.3.0
    cpe:2.3:a:gams:gams:42.3.0
  • Gams » Gams » Version: 42.4.0
    cpe:2.3:a:gams:gams:42.4.0
  • Gams » Gams » Version: 42.5.0
    cpe:2.3:a:gams:gams:42.5.0
  • Gams » Gams » Version: 43.1.0
    cpe:2.3:a:gams:gams:43.1.0
  • Gams » Gams » Version: 43.2.0
    cpe:2.3:a:gams:gams:43.2.0
  • Gams » Gams » Version: 43.3.0
    cpe:2.3:a:gams:gams:43.3.0
  • Gams » Gams » Version: 43.3.1
    cpe:2.3:a:gams:gams:43.3.1
  • Gams » Gams » Version: 43.4.0
    cpe:2.3:a:gams:gams:43.4.0
  • Gams » Gams » Version: 43.4.1
    cpe:2.3:a:gams:gams:43.4.1
  • Gams » Gams » Version: 44.1.0
    cpe:2.3:a:gams:gams:44.1.0
  • Gams » Gams » Version: 44.1.1
    cpe:2.3:a:gams:gams:44.1.1
  • Gams » Gams » Version: 44.2.0
    cpe:2.3:a:gams:gams:44.2.0
  • Gams » Gams » Version: 44.3.0
    cpe:2.3:a:gams:gams:44.3.0
  • Gams » Gams » Version: 44.4.0
    cpe:2.3:a:gams:gams:44.4.0
  • Gams » Gams » Version: 45.1.0
    cpe:2.3:a:gams:gams:45.1.0
  • Gams » Gams » Version: 45.2.0
    cpe:2.3:a:gams:gams:45.2.0
  • Gams » Gams » Version: 45.3.0
    cpe:2.3:a:gams:gams:45.3.0
  • Gams » Gams » Version: 45.4.0
    cpe:2.3:a:gams:gams:45.4.0
  • Gams » Gams » Version: 45.5.0
    cpe:2.3:a:gams:gams:45.5.0
  • Gams » Gams » Version: 45.6.0
    cpe:2.3:a:gams:gams:45.6.0
  • Gams » Gams » Version: 45.7.0
    cpe:2.3:a:gams:gams:45.7.0
  • Gams » Gams » Version: 46.1.0
    cpe:2.3:a:gams:gams:46.1.0
  • Gams » Gams » Version: 46.2.0
    cpe:2.3:a:gams:gams:46.2.0
  • Gams » Gams » Version: 46.3.0
    cpe:2.3:a:gams:gams:46.3.0
  • Gams » Gams » Version: 46.4.0
    cpe:2.3:a:gams:gams:46.4.0
  • Gams » Gams » Version: 46.4.1
    cpe:2.3:a:gams:gams:46.4.1
  • Gams » Gams » Version: 46.5.0
    cpe:2.3:a:gams:gams:46.5.0
  • Gams » Gams » Version: 47.1.0
    cpe:2.3:a:gams:gams:47.1.0
  • Gams » Gams » Version: 47.2.0
    cpe:2.3:a:gams:gams:47.2.0
  • Gams » Gams » Version: 47.3.0
    cpe:2.3:a:gams:gams:47.3.0
  • Gams » Gams » Version: 47.4.0
    cpe:2.3:a:gams:gams:47.4.0
  • Gams » Gams » Version: 47.4.1
    cpe:2.3:a:gams:gams:47.4.1
  • Gams » Gams » Version: 47.5.0
    cpe:2.3:a:gams:gams:47.5.0
  • Gams » Gams » Version: 47.6.0
    cpe:2.3:a:gams:gams:47.6.0
  • Gams » Gams » Version: 48.1.0
    cpe:2.3:a:gams:gams:48.1.0
  • Gams » Gams » Version: 48.2.0
    cpe:2.3:a:gams:gams:48.2.0
  • Gams » Gams » Version: 48.3.0
    cpe:2.3:a:gams:gams:48.3.0
  • Gams » Gams » Version: 48.4.0
    cpe:2.3:a:gams:gams:48.4.0
  • Gams » Gams » Version: 48.5.0
    cpe:2.3:a:gams:gams:48.5.0
  • Gams » Gams » Version: 48.6.0
    cpe:2.3:a:gams:gams:48.6.0
  • Gams » Gams » Version: 48.6.1
    cpe:2.3:a:gams:gams:48.6.1
  • Gams » Gams » Version: 49.2.0
    cpe:2.3:a:gams:gams:49.2.0
  • Gams » Gams » Version: 49.3.0
    cpe:2.3:a:gams:gams:49.3.0
  • Gams » Gams » Version: 49.4.0
    cpe:2.3:a:gams:gams:49.4.0
  • Gams » Gams » Version: 49.5.0
    cpe:2.3:a:gams:gams:49.5.0
  • Gams » Gams » Version: 49.6.0
    cpe:2.3:a:gams:gams:49.6.0
  • Gams » Gams » Version: 49.6.1
    cpe:2.3:a:gams:gams:49.6.1


Contact Us

Shodan ® - All rights reserved