CVE-2025-41672 in Device Sphere

الملخص

بحسب MITRE • 07/07/2025

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: CERTVDE
• حجز: 16/04/2025
• إفشاء: 07/07/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-315095
• CPE: جاهز
• CWE: CWE-1188 (مؤكد)
• CVSS: 10.0 (CNA)
• EPSS: 0.00346
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41672
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41672
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41672/