VULNERABILITY INTELLIGENCE

CVE-2025-57789

CVSS score5.3 MEDIUM
EPSS probability1.23%
CISA KEVNot currently listed
Published2025-08-20
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Weakness classification

  • CWE-257: Storing Passwords in a Recoverable Format

Primary references