CVE-2025-41672 in Device Sphere

요약

\~에 의해 MITRE • 2025. 07. 07.

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: CERTVDE
• 예약하다: 2025. 04. 16.
• 공개: 2025. 07. 07.
• 모더레이션: 수락
• 항목: VDB-315095
• CPE: 준비됨
• CWE: CWE-1188 (확인됨)
• CVSS: 10.0 (CNA)
• EPSS: 0.00346
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41672
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41672
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41672/