AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-48413

HIGH · CVSS 7.7 EPSS 0.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-05-21 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.7. See the original NVD description below for full technical details.

CVE
CVE-2025-48413
Severity
HIGH
CVSS
7.7
EPSS
0.22%

Original NVD Description

The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device. Authentication can be performed via SSH backdoor or likely via physical access (UART shell).