CVE-2025-50122
A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts.
- Score
- CVSS 4.0 8.9 High
- Status
- Deferred - cybersecurity@se.com
- Published
- 2025-07-11
- Last modified
- 2025-11-03
- Weaknesses
- CWE-331
Affected products
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-189-01&p_enDocType=Security+and+Safety+Notice&p_File_…
- http://seclists.org/fulldisclosure/2025/Jul/7