← CVE Intelligence

CVE-2025-41731

Jumo: Insufficient entropy in PRNG may lead to root access PUBLISHED

Description (CNA)

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.

Affected (CNA)

Vendor / productVersions
Jumo / variTRON300affected 0.0.0.0 before 9.0.2.5
Jumo / variTRON500affected 0.0.0.0 before 9.0.2.5
Jumo / variTRON500 touchaffected 0.0.0.0 before 9.0.2.5

CWE

CWE-338

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.