CVE-2024-25825

Published: Oct 9, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

Related CWEs

CWE-259

Use of Hard-coded Password

The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

References (4)

https://fydeos.io/

Source: cve@mitre.org

https://gist.github.com/hchasens/d20dff418f6908dc96e65f4e43a058f1

Source: cve@mitre.org

https://github.com/openFyde/

Source: cve@mitre.org

https://openfyde.io/

Source: cve@mitre.org

Timeline

No history available yet.