CVE-2025-48416

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though.

• CWE-912

• https://r.sec-consult.com/echarge
• http://seclists.org/fulldisclosure/2025/May/23

Published

May 21, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-48397The privileged user could log in without sufficient credenti…7.1
• CVE-2025-4840The inprosysmedia-likes-dislikes-post WordPress plugin throu…7.5
• CVE-2025-4841A vulnerability was found in D-Link DCS-932L 2.18.01 and cla…9.8
• CVE-2025-48413The `/etc/passwd` and `/etc/shadow` files reveal hard-coded …7.7
• CVE-2025-48414There are several scripts in the web interface that are acce…6.5
• CVE-2025-48415A USB backdoor feature can be triggered by attaching a USB d…6.2
• CVE-2025-48417The certificate and private key used for providing transport…6.5
• CVE-2025-48418A hidden functionality vulnerability in Fortinet FortiAnalyz…7.2
• CVE-2025-48419Rejected reason: Not used
• CVE-2025-4842A vulnerability was found in D-Link DCS-932L 2.18.01. It has…9.8
• CVE-2025-48420Rejected reason: Not used
• CVE-2025-48421Rejected reason: Not used