Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Weak Password Hashing in [Software Name] Exposes Device Security

CVE-2025-27595 · published 1 year ago
Summary

The [Software Name] device uses a weak method to store passwords, making it easy for attackers to guess or calculate them. This weakness puts the device's security and integrity at risk. Update the software to a version that uses a stronger password hashing method.

Original advisory text
The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.
The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-328Use of Weak Hash
Timeline
Published14 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-27595 · NVD
Track software like this
Free during beta