CVE-2025-52492 — n/a / n/a

Description (CNA)

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz, contains hard-coded credentials for the Twilio API. A remote attacker who obtains a copy of the firmware can extract these credentials. This could allow the attacker to gain unauthorized access to the associated Twilio account, leading to information disclosure, potential service disruption, and unauthorized use of the Twilio services.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://paxton-access.co.uk
https://gist.github.com/jackcaplin/0dfb7ef428b8ade5de4396dd753cd894

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.