PT-2024-21144 · Unknown+1 · Fydeos For You+3

Published 2024-10-09 · Updated 2025-07-30 · CVE-2024-25825

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FydeOS for PC version 17.1 R114 FydeOS for VMware version 17.0 R114 FydeOS for You version 17.1 R114 OpenFyde version R114

Description The issue allows attackers to gain root access without a password due to the root password being saved as a wildcard in the configuration. This enables unauthorized access.

Recommendations For FydeOS for PC version 17.1 R114, update the software and secure configuration files with strong passwords. For FydeOS for VMware version 17.0 R114, update the software and secure configuration files with strong passwords. For FydeOS for You version 17.1 R114, update the software and secure configuration files with strong passwords. For OpenFyde version R114, update the software and secure configuration files with strong passwords.

Fix

Weakness Enumeration

CWE-259

Related Identifiers

BDU:2026-00226

CVE-2024-25825

Affected Products

Fydeos For Pc

Fydeos For Vmware

Fydeos For You

Openfyde

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-25825 · Security Note
• https://bdu.fstec.ru/vul/2026-00226 · Security Note
• https://github.com/openFyde · Note
• https://t.me/cvedetector/7499 · Telegram Post
• https://twitter.com/FSFG/status/1950552748312744228 · Twitter Post
• https://gist.github.com/hchasens/d20dff418f6908dc96e65f4e43a058f1 · Note
• https://openfyde.io · Note
• https://vuldb.com/ru/?id.279886 · Note
• https://twitter.com/CVEnew/status/1844058761419424194 · Twitter Post
• https://twitter.com/oktsec/status/1844084955552399650 · Twitter Post
• https://fydeos.io · Note