CVE Catalog
CVE-2025-54548
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes).
Risk Assessment
Exposure of password hashes could allow attackers to crack them and take over accounts, posing a serious security threat.
Recommendation
Disable or restrict access to the debug API for unprivileged users. Apply security patches provided by the vendor.
Other vulnerabilities in Platform
Original NVD description (English source)
On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS