VULNERABILITY INTELLIGENCE
CVE-2025-54807
CVSS score9.8 CRITICAL
EPSS probability0.75%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-321