CVE-2024-25825

—

CVSS 3.1

9.8 critical

EPSS

<1%p43

Published

Oct 9, 2024 (Oct 9, 2024)

Modified

Jun 17, 2026

Description

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

Weakness: CWE-259
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.