PT-2025-31225 · Tsplus · Tsplus

Michał Walkowski · Published 2025-07-29 · Updated 2025-07-29 · CVE-2025-5922

Positive Technologies · (AI Summary)

CVSS v4.0

4.8

Medium

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TSplus versions prior to 18.40.6.17 TSplus versions prior to 17.2025.6.27 TSplus versions prior to 16.2025.6.27

Description Access to the TSplus Remote Access Admin Tool is restricted to administrators (unless the "Disable UAC" option is enabled) and requires a PIN code. In affected versions, the PIN’s hash is stored in a system registry accessible to regular users, potentially allowing a brute-force attack using rainbow tables due to the lack of salting.

Recommendations Update TSplus to version 18.40.6.17 or later. Update TSplus to version 17.2025.6.27 or later. Update TSplus to version 16.2025.6.27 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-759

Related Identifiers

CVE-2025-5922

Affected Products

Tsplus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-5922 · Security Note
• https://twitter.com/walkowskimichal/status/1950290166947430426 · Twitter Post
• https://twitter.com/CVEnew/status/1950244922168148461 · Twitter Post
• https://t.me/CVEtracker/28681 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950264438537294329 · Twitter Post
• https://cert.pl/en/posts/2025/07/CVE-2025-5922 · Note