CVEvulnerability

CVE-2024-25825

9.8 CRITICAL Published 2024-10-09 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-10-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-259

Description

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

Related

Weakness · CWE (1)

  • CWE-259 Use of Hard-coded Password weakness

References