The vulnerability of the FydeOS operating system, which stems from the possibility of using rigidly defined credentials, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the FydeOS operating system is related to the possibility of using rigidly defined credentials. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code...

The Discovery, Disclosure, and Investigation of CVE-2024-25825

CVE-2024-25825 is a vulnerability found in FydeOS. This thesis describes its discovery, disclosure, and its further investigation in connection to a nation state actor. The vulnerability is CWE-1392: Use of Default Credentials, CWE-1393: Use of Default Password, and CWE-258: Empty Password in...

CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...

CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...

CVE-2024-25825

Several FydeOS products are vulnerable to unauthorized root access due to CWE-1392 (Use of Default Credentials) and CWE-258 (Empty Password in Configuration File). Specifically, the root user entry in the /etc/shadow configuration file contains a wildcard , allowing attackers to gain root privile...

PT-2024-21144 · Openfyde +1 · Openfyde +3

Name of the Vulnerable Software and Affected Versions: FydeOS for PC version 17.1 R114 FydeOS for VMware version 17.0 R114 FydeOS for You version 17.1 R114 OpenFyde version R114 Description: The issue allows attackers to gain root access without a password due to the root password being saved as ...

FydeOS多款产品 安全漏洞

FydeOS is an operating system from Flintstone Innovations FydeOS. A security vulnerability exists in various FydeOS products, which stems from setting the root password to a wildcard, allowing an attacker to gain root access without a password. The affected products and versions are as follows:...

CVE-2024-25825: Use of Hard-coded Password

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...

CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...

CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...