CVE-2025-48417

The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files. An attacker can use the private key to perform man-in-the-middle attacks against users of the admin interface. The files are located in /etc/ssl (e.g. salia.local.crt, salia.local.key and salia.local.pem). There is no option to upload/configure custom TLS certificates.

• CWE-321

• https://r.sec-consult.com/echarge
• http://seclists.org/fulldisclosure/2025/May/23

Published

May 21, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4840The inprosysmedia-likes-dislikes-post WordPress plugin throu…7.5
• CVE-2025-4841A vulnerability was found in D-Link DCS-932L 2.18.01 and cla…9.8
• CVE-2025-48413The `/etc/passwd` and `/etc/shadow` files reveal hard-coded …7.7
• CVE-2025-48414There are several scripts in the web interface that are acce…6.5
• CVE-2025-48415A USB backdoor feature can be triggered by attaching a USB d…6.2
• CVE-2025-48416An OpenSSH daemon listens on TCP port 22. There is a hard-co…8.1
• CVE-2025-48418A hidden functionality vulnerability in Fortinet FortiAnalyz…7.2
• CVE-2025-48419Rejected reason: Not used
• CVE-2025-4842A vulnerability was found in D-Link DCS-932L 2.18.01. It has…9.8
• CVE-2025-48420Rejected reason: Not used
• CVE-2025-48421Rejected reason: Not used
• CVE-2025-48422Rejected reason: Not used