CVE-2025-5922

🗓️ 29 Jul 2025 16:54:43Reported by CERT-PLType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 8 Views

CVE-2025-5922 allows brute-force attacks on TSplus Remote Access PIN due to unsalted hash storage.

Reporter	Title	Published	Views	Family All 7
CNNVD	TSplus Remote Access Admin Tool 安全漏洞	29 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-5922 Retrievable password hash protecting TSplus admin console	29 Jul 202516:54	–	cvelist
EUVD	EUVD-2025-23007	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5922	29 Jul 202517:15	–	nvd
Positive Technologies	PT-2025-31225 · Tsplus · Tsplus	29 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5922	31 Jul 202517:10	–	redhatcve
Vulnrichment	CVE-2025-5922 Retrievable password hash protecting TSplus admin console	29 Jul 202516:54	–	vulnrichment

Vulners

Node

tsplus tsplus_remote_accessRange<18.40.6.17windows

tsplus tsplus_remote_accessRange<17.2025.6.27windows

tsplus tsplus_remote_accessRange<16.2025.6.27windows

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "AdminTool"
    ],
    "platforms": [
      "Windows"
    ],
    "product": "TSplus Remote Access",
    "vendor": "TSplus",
    "versions": [
      {
        "lessThan": "v18.40.6.17",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "v17.2025.6.27",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "v16.2025.6.27",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]