CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2024-10-09

Last modified

2024-10-10

Weaknesses

CWE-259

Affected products

• Fydeos (Fydeos)
• Openfyde (Fydeos)

References

• https://fydeos.io/
• https://gist.github.com/hchasens/d20dff418f6908dc96e65f4e43a058f1
• https://github.com/openFyde/
• https://openfyde.io/