A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 10 Nov 2025 08:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled. | |
| Title | Jumo: Insufficient entropy in PRNG may lead to root access | |
| Weaknesses | CWE-338 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2025-11-10T07:44:40.644Z
Reserved: 2025-04-16T11:17:48.319Z
Link: CVE-2025-41731
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-11-10T08:15:33.957
Modified: 2025-11-10T08:15:33.957
Link: CVE-2025-41731
Redhat
No data.
OpenCVE Enrichment
No data.