CVE-2024-25825
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 9, 2024
Updated: Oct 11, 2024
CWE ID 259
Summary
CVE-2024-25825 is a vulnerability affecting FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114. The issue lies in the configuration of these systems, where the root password has been saved as a wildcard. Consequently, attackers can exploit this weakness to bypass authentication and gain unauthorized root access. This vulnerability poses a significant risk to system security and requires immediate attention for patching or mitigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.