CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2025-1100
Severity
CRITICAL
CVSS
9.8
EPSS
0.80%
Original NVD Description
A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to execute arbitrary code with root privileges via SSH.
Related CVEs
Other vulnerabilities affecting the same vendor(s)