VULNERABILITY INTELLIGENCE
CVE-2024-25825
CVSS score9.8 CRITICAL
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-10-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.
Weakness classification
- CWE-259: Use of Hard-coded Password