CVE-2024-25825

9.8 criticalEPSS 0.5%

Critical (9.8). EPSS 0.5% chance of exploitation in the next 30 days.

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-259
Published: 2024-10-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://fydeos.io/
https://gist.github.com/hchasens/d20dff418f6908dc96e65f4e43a058f1
https://github.com/openFyde/
https://openfyde.io/

Check your stack JSON