CVE-2025-2189
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 416
Summary
CVE-2025-2189 is a vulnerability affecting Tinxy smart devices. The issue arises from the storing of credentials in plaintext within the device firmware. An attacker with physical access to the device can exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the plaintext credentials stored on the vulnerable device, posing a significant risk to the security of the affected device and potentially leading to unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX