PT-2025-38738 · Airship Ai · Airship Ai Acropolis

CVE-2025-35042 · Published 2025-09-22 · Updated 2025-12-19

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Airship AI Acropolis versions prior to 10.2.35 Airship AI Acropolis versions prior to 11.0.21 Airship AI Acropolis versions prior to 11.1.9

Description Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. If this account password is not changed, a remote attacker can log in and gain administrative privileges.

Recommendations Upgrade to version 10.2.35. Upgrade to version 11.0.21. Upgrade to version 11.1.9.

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2025-14815

CVE-2025-35042

Affected Products

Airship Ai Acropolis

References · 8

• https://cve.org/CVERecord?id=CVE-2025-35042 · Security Note
• https://bdu.fstec.ru/vul/2025-14815 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-35042 · Security Note
• https://osv.dev/vulnerability/CVE-2025-35042 · Vendor Advisory
• https://twitter.com/CVEnew/status/1970160918202810420 · Twitter Post
• https://twitter.com/CveFindCom/status/1970158586291486836 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-265-01.json · Note
• https://t.me/cveNotify/146321 · Telegram Post