CVE-2025-54807: CVE-2025-54807: güvenlik açığı

Açıklama (NVD)

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4.0

9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,75 (yüzdelik 55)

CWE

CWE-321

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• www.cisa.gov
• www.doverfuelingsolutions.com
• CWE-321