CVE-2024-25825

CVSS 9.8 CRITICALEPSS 0.5%CWE-259

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Oct 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://fydeos.io/https://gist.github.com/hchasens/d20dff418f6908dc96e65f4e43a058f1 https://github.com/openFyde/https://openfyde.io/