Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2025-54807: Authentication key hardcoded in device firmware
CVE-2025-54807 · published 1 year ago
Summary
A security issue exists in certain device firmware versions. An attacker who gets the secret key used to verify logins can access the device without a password. Affected devices should be updated to the latest firmware version to protect against unauthorized access.
Original advisory text
The secret used for validating authentication tokens is hardcoded in
device firmware for affected versions. An attacker who obtains the
signing key can bypass authentication, gaining complete acc...
The secret used for validating authentication tokens is hardcoded in
device firmware for affected versions. An attacker who obtains the
signing key can bypass authentication, gaining complete access to the
system.
device firmware for affected versions. An attacker who obtains the
signing key can bypass authentication, gaining complete access to the
system.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-321Use of Hard-coded Cryptographic Key
Timeline
Published18 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-54807 · NVD
Track software like this
Free during beta