PT-2025-6799 · Mobaxterm · Mobaxterm

Cirosec · Published 2025-02-17 · Updated 2025-02-19 · CVE-2025-0714

Positive Technologies · (AI Summary)

CVSS v3.1

6.5

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions:

MobaXterm versions prior to 25.0

Description:

The issue exists in the password storage of MobaXterm, where it uses an initialization vector (IV) consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, a derivative of the user's password is used as the master key. Since both the master key and the IV are the same for each stored password, the AES CFB ciphertext depends only on the plaintext (the password). This static IV and master key make it easier to obtain sensitive information and to decrypt data when it is stored at rest.

Recommendations:

For versions prior to 25.0, update to version 25.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information stored with MobaXterm until the update can be applied.

Fix

Weakness Enumeration

CWE-1204

Related Identifiers

CVE-2025-0714

Affected Products

Mobaxterm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-0714 · Security Note
• https://twitter.com/CVEnew/status/1891464156400046510 · Twitter Post
• https://cirosec.de/sa/sa-2024-012 · Note
• https://t.me/cvenotify/111739 · Telegram Post
• https://t.me/cvedetector/18255 · Telegram Post